CVE-2009-4092: CSRF

Published Nov 27, 2009

Updated

Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords.

Affected Software

1 affected component

Simplog Simplog=0.9.3.2

Event History

Nov 27, 2009

CVE Published

via MITRE·08:45 PM

Data Sourced

via MITRE·08:45 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-4092?

CVE-2009-4092 is considered a medium severity vulnerability due to the potential for unauthorized password changes.

How do I fix CVE-2009-4092?

To fix CVE-2009-4092, update to a version of Simplog that addresses this CSRF vulnerability.

What types of attacks can be executed via CVE-2009-4092?

CVE-2009-4092 allows attackers to perform cross-site request forgery attacks, enabling them to hijack user authentication.

Who is affected by CVE-2009-4092?

CVE-2009-4092 affects users and administrators of Simplog versions 0.9.3.2 and possibly earlier.

What is the impact of CVE-2009-4092 on users?

The impact of CVE-2009-4092 can lead to unauthorized password changes and loss of account control for users and admins.