CSRF Vulnerability in Greenbone Security Assistant (GSA) by Greenbone Networks
CVE-2011-0650

Currently unrated

Key Information:

Vendor: Greenbone
Status: Greenbone Security Assistant
Vendor: CVE Published:; 28 January 2011

What is CVE-2011-0650?

The Greenbone Security Assistant (GSA) presents a cross-site request forgery (CSRF) vulnerability that enables remote attackers to exploit user sessions. This is accomplished through malicious requests that can hijack user authentication, particularly when utilizing the OpenVAS Manager to send emails via OMP requests. As a result, attackers could leverage this vulnerability to bypass authentication requirements, further exposing the system to potential exploitation.

References

http://www.securityfocus.com/archive/1/515971/100/0/threaded

mailing-listx_refsource_BUGTRAQ

http://secunia.com/advisories/43092

third-party-advisoryx_refsource_SECUNIA

http://www.openvas.org/OVSA20110118.html

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 28, 2011
Vulnerability Reserved
Jan 26, 2011

CVE-2011-0650 Data

JSON