CVE-2012-6493: CSRF
First published: Tue Feb 04 2014(Updated: )
Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rapid7 Nexpose | <=5.5.3 | |
| Rapid7 Nexpose | =5.4 | |
| Rapid7 Nexpose | =5.4.1 | |
| Rapid7 Nexpose | =5.4.2 | |
| Rapid7 Nexpose | =5.4.3 | |
| Rapid7 Nexpose | =5.4.4 | |
| Rapid7 Nexpose | =5.4.5 | |
| Rapid7 Nexpose | =5.4.6 | |
| Rapid7 Nexpose | =5.4.7 | |
| Rapid7 Nexpose | =5.4.8 | |
| Rapid7 Nexpose | =5.4.9 | |
| Rapid7 Nexpose | =5.4.10 | |
| Rapid7 Nexpose | =5.4.11 | |
| Rapid7 Nexpose | =5.4.12 | |
| Rapid7 Nexpose | =5.5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-6493?
CVE-2012-6493 is categorized as a high severity cross-site request forgery vulnerability that can allow attackers to delete scan data.
How do I fix CVE-2012-6493?
To fix CVE-2012-6493, upgrade your Rapid7 Nexpose Security Console to version 5.5.4 or later.
What versions of Rapid7 Nexpose are affected by CVE-2012-6493?
CVE-2012-6493 affects all versions of Rapid7 Nexpose Security Console prior to 5.5.4, including versions 5.4.x.
What type of vulnerability is CVE-2012-6493?
CVE-2012-6493 is a cross-site request forgery (CSRF) vulnerability.
What impact does CVE-2012-6493 have on security?
CVE-2012-6493 can lead to unauthorized actions being performed by attackers, such as the deletion of important scan data and sites.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/remedy
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- vendor/rapid7
- canonical/rapid7 nexpose
- version/rapid7 nexpose/5.5.3
- version/rapid7 nexpose/5.4
- version/rapid7 nexpose/5.4.1
- version/rapid7 nexpose/5.4.2
- version/rapid7 nexpose/5.4.3
- version/rapid7 nexpose/5.4.4
- version/rapid7 nexpose/5.4.5
- version/rapid7 nexpose/5.4.6
- version/rapid7 nexpose/5.4.7
- version/rapid7 nexpose/5.4.8
- version/rapid7 nexpose/5.4.9
- version/rapid7 nexpose/5.4.10
- version/rapid7 nexpose/5.4.11
- version/rapid7 nexpose/5.4.12
- version/rapid7 nexpose/5.5.1