Cross-Site Request Forgery Vulnerability in Netsweeper WebAdmin Portal
CVE-2012-2447

Currently unrated

Key Information:

Vendor

Netsweeper

Status
Netsweeper
Vendor
CVE Published:
9 July 2012

What is CVE-2012-2447?

The WebAdmin Portal in Netsweeper contains a Cross-Site Request Forgery (CSRF) vulnerability in the accountmgr/adminupdate.php file. This flaw enables remote attackers to exploit the authentication of administrators, potentially allowing unauthorized requests to create administrative accounts through an add action. By tricking an administrator into clicking a malicious link, an attacker can bypass authentication mechanisms, leading to unauthorized modifications within the platform. This type of vulnerability can significantly compromise the security posture of affected systems.

References

http://infosec42.blogspot.com/2012/07/cve-2012-2446-cve-2...
x_refsource_MISC
http://www.kb.cert.org/vuls/id/763795
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.