CVE-2012-6493: CSRF
Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6493?
CVE-2012-6493 is categorized as a high severity cross-site request forgery vulnerability that can allow attackers to delete scan data.
How do I fix CVE-2012-6493?
To fix CVE-2012-6493, upgrade your Rapid7 Nexpose Security Console to version 5.5.4 or later.
What versions of Rapid7 Nexpose are affected by CVE-2012-6493?
CVE-2012-6493 affects all versions of Rapid7 Nexpose Security Console prior to 5.5.4, including versions 5.4.x.
What type of vulnerability is CVE-2012-6493?
CVE-2012-6493 is a cross-site request forgery (CSRF) vulnerability.
What impact does CVE-2012-6493 have on security?
CVE-2012-6493 can lead to unauthorized actions being performed by attackers, such as the deletion of important scan data and sites.