Cross-Site Request Forgery in Veeam ONE Reporter by Veeam
CVE-2019-11569
8.8HIGH
Summary
Veeam ONE Reporter version 9.5.0.3201 is susceptible to Cross-Site Request Forgery (CSRF) attacks, which could enable an attacker to perform unauthorized actions on behalf of an authenticated user. This vulnerability could potentially compromise the security of the affected systems if exploited, highlighting the need for updated protections against such attacks. Security measures should be implemented to mitigate risks associated with CSRF vulnerabilities.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved