CVE-2014-6409 Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that change user passwords via the full...
MediumCVSS 6.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that change user passwords via the fullname and password parameters to /admin/users/update.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mmonit | <= 3.3.2 | No fix listed |
References
- packetstormsecurity.com exploit
- 20140919 M/Monit - Account hijacking via CSRF exploit mailing-list
- 34718 exploit
- mmonit-cve20146409-csrf(96122) vdb-entry