CVE-2014-7190 Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown or (2) reboot the se...
MediumCVSS 6.8
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown or (2) reboot the server via a request to admin/system_shutdown.html.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openfiler | = 2.99.1 | No fix listed |
References
- packetstormsecurity.com exploit
- 20140927 Openfiler DoS via CSRF (CVE-2014-7190) exploit mailing-list
- 70163 vdb-entry