CVE-2007-3489 Cross-site request forgery (CSRF) vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33x on the Check Point VPN-1 UTM Edge allows remote attackers....
HighCVSS 9.3
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33x on the Check Point VPN-1 UTM Edge allows remote attackers to perform privileged actions as administrators, as demonstrated by a request with the swuuser and swupass parameters, which adds an administrator account. NOTE: the CSRF attack has no timing window because there is no logout capability in the management interface.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint vpn-1 utm edge | = 7.0.33 | No fix listed |
References
- 37645 vdb-entry
- 25853 patch third-party-advisory vendor-advisory
- 2848 third-party-advisory
- www.louhi.fi
- 20070627 CheckPoint VPN-1 UTM Edge Cross Site Request Forgery vulnerability mailing-list
- ADV-2007-2363 vdb-entry
- checkpoint-vpn1edge-unspecified-csrf(35103) vdb-entry