QwikSec

Security Database

CVE

CWE

Training

CVE-2013-7107

Published: Jan 14, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://dev.icinga.org/issues/5346

x_refsource_CONFIRM

openSUSE-SU-2014:0269

vendor-advisory

x_refsource_SUSE

https://dev.icinga.org/issues/5250

x_refsource_MISC

https://www.icinga.org/2013/12/17/icinga-security-releases-1-10-2-1-9-4-1-8-5/

x_refsource_CONFIRM

[oss-security] 20131216 Fwd: Vulnerability (Buffer Overflow) in Icinga 1.8, 1.9 and 1.10 (Icinga Issue #5250) Vulnerability (Off-by-one memory access) in Icinga 1.8, 1.9 and 1.10 (Icinga Issue #5251)

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

CVE-2013-7107 - Security Vulnerability | QwikSec