CVE-2014-7158 Cross-site request forgery (CSRF) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows remote attackers to hijack the authentication of administrators for requests that change the admin....
MediumCVSS 6.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in Exinda WAN Optimization Suite 7.0.0 (2160) allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to admin/launch.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exinda wan optimization suite | = 7.0.0 | No fix listed |
References
- packetstormsecurity.com exploit
- 20140927 XSS Reflected vulnerabilities and CSRF in Exinda WAN Optimization Suite (CVE-2014-7157, CVE-2014-7158) exploit mailing-list
- 70161 exploit vdb-entry
- exindawan-cve20147158-csrf(96702) vdb-entry