CVE-2014-1473

CVE-2014-1473

EPSS 0.7%

Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://osvdb.org/101939 http://secunia.com/advisories/56394 https://exchange.xforce.ibmcloud.com/vulnerabilities/90245 https://kc.mcafee.com/corporate/index?page=content&id=SB10061 http://www.securityfocus.com/bid/64795 http://www.securitytracker.com/id/1029591