QwikSec

Security Database

CVE

CWE

Training

CVE-2007-3464

Published: Jun 27, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://labs.calyptix.com/CX-2007-04.php

x_refsource_MISC

vdb-entry

x_refsource_OSVDB

http://labs.calyptix.com/CX-2007-04.txt

x_refsource_MISC

safeatoffice-admin-password-modification(35094)

vdb-entry

x_refsource_XF

20070626 Calyptix Security Advisory CX-2007-04 - Cross-Site Request Forgery Attack Against Check Point Safe@Office Device

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.