CVE-2009-3759: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in sample code in the XenServer Resource Kit in Citrix XenCenterWeb allow remote attackers to hijack the authentication of administrators for (1) requests that change the password via the username parameter to config/changepw.php or (2) stop a virtual machine via the stopvmname parameter to hardstopvm.php. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3759?
CVE-2009-3759 has a high severity rating due to its potential to allow remote attackers to hijack administrator sessions.
How can I fix CVE-2009-3759?
To fix CVE-2009-3759, ensure that security patches are applied and implement anti-CSRF tokens in requests to vulnerable endpoints.
Which versions of Citrix XenCenterWeb are affected by CVE-2009-3759?
CVE-2009-3759 affects all versions of Citrix XenCenterWeb prior to the implementation of security fixes.
What action can attackers take by exploiting CVE-2009-3759?
By exploiting CVE-2009-3759, attackers can perform unauthorized actions as an authenticated administrator, such as changing passwords.
Is user interaction required to exploit CVE-2009-3759?
No, user interaction is not required to exploit CVE-2009-3759, making it particularly dangerous as it can be executed remotely.