CVE

Id
69622  
CVE No.
CVE-2014-2327  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users for unspecified commands, as demonstrated by requests that (1) modify binary files, (2) modify configurations, or (3) add arbitrary users.  
Phase
Assigned (20140312)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
666245 69622 CVE-2014-2327 BUGTRAQ:20140324 Deutsche Telekom CERT Advisory [DTC-A-20140324-001] vulnerabilities in cacti  View
666246 69622 CVE-2014-2327 URL:http://www.securityfocus.com/archive/1/531588  View
666247 69622 CVE-2014-2327 CONFIRM:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768  View
666248 69622 CVE-2014-2327 DEBIAN:DSA-2970  View
666249 69622 CVE-2014-2327 URL:http://www.debian.org/security/2014/dsa-2970  View
666250 69622 CVE-2014-2327 GENTOO:GLSA-201509-03  View
666251 69622 CVE-2014-2327 URL:https://security.gentoo.org/glsa/201509-03  View
666252 69622 CVE-2014-2327 SUSE:openSUSE-SU-2015:0479  View
666253 69622 CVE-2014-2327 URL:http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html  View
666254 69622 CVE-2014-2327 JVN:JVN#55076671  View
666255 69622 CVE-2014-2327 URL:http://jvn.jp/en/jp/JVN55076671/index.html  View
666256 69622 CVE-2014-2327 JVNDB:JVNDB-2014-002239  View
666257 69622 CVE-2014-2327 URL:http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002239.html  View
666258 69622 CVE-2014-2327 BID:66392  View
666259 69622 CVE-2014-2327 URL:http://www.securityfocus.com/bid/66392  View
666260 69622 CVE-2014-2327 SECUNIA:59203  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16294 JVNDB-2014-005169 Fortinet FortiManager の Web User インターフェースにおけるクロスサイトスクリプティングの脆弱性 Fortinet FortiManager の Web User インターフェースには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-2335 69622 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005169.html  View