CVE-2011-5223: XSS
Published Oct 25, 2012
·Updated
Cross-site request forgery (CSRF) vulnerability in logout.php in Cacti before 0.8.7i allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
39 affected components
Cacti Cacti=0.8.6k
Cacti Cacti=0.8.6d
Cacti Cacti=0.6.3
Cacti Cacti=0.5
Cacti Cacti=0.8.7
Cacti Cacti=0.8.5a
Cacti Cacti=0.8.3
Cacti Cacti=0.6.8
Cacti Cacti=0.8.2
Cacti Cacti=0.8.5
Cacti Cacti=0.6.6
Cacti Cacti=0.8.7d
Cacti Cacti=0.8.7b
Cacti Cacti=0.8.7a
Cacti Cacti=0.6.2
Cacti Cacti=0.6.5
Cacti Cacti=0.8.6f
Cacti Cacti=0.8.6g
Cacti Cacti=0.8.6j
Cacti Cacti=0.8.7c
Cacti Cacti=0.6.1
Cacti Cacti=0.8
Cacti Cacti=0.8.7f
Cacti Cacti=0.8.7e
Cacti Cacti=0.8.6a
Cacti Cacti=0.8.6i
Cacti Cacti=0.8.6
Cacti Cacti=0.6.8a
Cacti Cacti=0.6.7
Cacti Cacti=0.8.1
Cacti Cacti=0.8.4
Cacti Cacti=0.8.6c
Cacti Cacti=0.6.4
Cacti Cacti<=0.8.7h
Cacti Cacti=0.8.6b
Cacti Cacti=0.8.7g
Cacti Cacti=0.8.3a
Cacti Cacti=0.8.6h
Cacti Cacti=0.6
Event History
Oct 25, 2012
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-5223?
CVE-2011-5223 is classified as a medium severity vulnerability due to its potential for cross-site request forgery attacks.
2
How do I fix CVE-2011-5223?
To fix CVE-2011-5223, upgrade your Cacti installation to version 0.8.7i or later.
3
Which versions of Cacti are affected by CVE-2011-5223?
CVE-2011-5223 affects Cacti versions from 0.5 to 0.8.6k.
4
What type of vulnerability is CVE-2011-5223?
CVE-2011-5223 is a cross-site request forgery (CSRF) vulnerability.
5
Can CVE-2011-5223 allow an attacker to hijack sessions?
Yes, CVE-2011-5223 allows attackers to hijack the authentication of specified victims.