Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Zenoss Core through 5 Beta 3 allow remote attackers to hijack the authentication of arbitrary users, aka ZEN-12653.
References (2)
Core 2
Core References
Third Party Advisory, US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/449452
Various Sources x_refsource_confirm
https://docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit?usp=sharing
Scores
EPSS
0.0065
EPSS Percentile
46.9%
Details
CWE
CWE-352
Status
published
Products (18)
zenoss/zenoss_core
2.4.0
zenoss/zenoss_core
2.4.5
zenoss/zenoss_core
2.5.0
zenoss/zenoss_core
2.5.1
zenoss/zenoss_core
2.5.2
zenoss/zenoss_core
3.0.0
zenoss/zenoss_core
3.0.1
zenoss/zenoss_core
3.0.2
zenoss/zenoss_core
3.0.3
zenoss/zenoss_core
3.1.0
... and 8 more
Published
Dec 15, 2014
Tracked Since
Feb 18, 2026