CVE-2012-2447: CSRF
Cross-site request forgery (CSRF) vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via an add action.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2447?
CVE-2012-2447 is rated as a high severity vulnerability due to its potential for cross-site request forgery, allowing unauthorized administrative actions.
How do I fix CVE-2012-2447?
To fix CVE-2012-2447, ensure that your Netsweeper software is updated to the latest version that includes the patch addressing this CSRF vulnerability.
What is impacted by CVE-2012-2447?
CVE-2012-2447 affects the WebAdmin Portal in Netsweeper, specifically the accountmgr/adminupdate.php component.
What types of attacks can exploit CVE-2012-2447?
CVE-2012-2447 can be exploited through cross-site request forgery attacks, enabling remote attackers to hijack administrator authentication.
Who is vulnerable to CVE-2012-2447?
Administrators using vulnerable versions of Netsweeper software are at risk of exploitation due to CVE-2012-2447.