CVE-2014-2358

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create administrative users, (2) remove administrative users, or (3) change permissions.
References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-14-269-02 Third Party Advisory US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-14-269-02 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:h:fox-it:fox_datadiode:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:06

Type Values Removed Values Added
References () https://ics-cert.us-cert.gov/advisories/ICSA-14-269-02 - Third Party Advisory, US Government Resource () https://ics-cert.us-cert.gov/advisories/ICSA-14-269-02 - Third Party Advisory, US Government Resource

Information

Published : 2014-10-19 01:55

Updated : 2024-11-21 02:06


NVD link : CVE-2014-2358

Mitre link : CVE-2014-2358

CVE.ORG link : CVE-2014-2358


JSON object : View

Products Affected

fox-it

  • fox_datadiode
CWE
CWE-352

Cross-Site Request Forgery (CSRF)