CVE-2010-2594

InterSect Alliance Snare Agent < 3.2.3 - Cross-Site Request Forgery in Web Management Interface

Title source: llm
STIX 2.1

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5.3 and earlier on Windows, and Snare Epilog 1.2 and earlier on UNIX allow remote attackers to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.

References (4)

Core 4
Core References
Third Party Advisory x_refsource_misc
http://holisticinfosec.org/content/view/144/45/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/41226
Broken Link third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39562
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/173009

Scores

EPSS 0.0147
EPSS Percentile 70.6%

Details

CWE
CWE-352
Status published
Products (46)
intersect_alliance/snare_agent 2.0
intersect_alliance/snare_agent 2.1
intersect_alliance/snare_agent 2.3
intersect_alliance/snare_agent 2.4
intersect_alliance/snare_agent 2.5
intersect_alliance/snare_agent 2.5.2
intersect_alliance/snare_agent 2.5.3
intersect_alliance/snare_agent 2.5.4
intersect_alliance/snare_agent 2.5.6
intersect_alliance/snare_agent 2.5.7
... and 36 more
Published Jul 02, 2010
Tracked Since Feb 18, 2026