Cross-Site Request Forgery Vulnerability in Rapid7 Nexpose Security Console
CVE-2012-6493

Currently unrated

Key Information:

Vendor

Rapid7

Status
Vendor
CVE Published:
4 February 2014

What is CVE-2012-6493?

A cross-site request forgery (CSRF) vulnerability exists in Rapid7's Nexpose Security Console which allows remote attackers to impersonate users and authorize requests that can delete critical scan data and sites. This presents a significant security risk as successful exploitation could lead to unauthorized data loss and manipulation. Users of Nexpose Security Console should ensure they update to the latest version to mitigate this issue and protect against potential attacks.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.