CVE-2010-2268 Cross-site request forgery (CSRF) vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to hijack the authentication of administrators for requests tha...
MediumCVSS 6.8
EPSS 0.61%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to hijack the authentication of administrators for requests that create user accounts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| accoria rock web server | = 1.4.7 | No fix listed |
References
- www.ioactive.com exploit
- VU#245081 third-party-advisory us-government-resource