CVE-2013-6028: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts, (2) modify user accounts, (3) delete user accounts, or (4) stop the product's service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6028?
CVE-2013-6028 is considered a critical severity vulnerability due to its potential for cross-site request forgery, allowing unauthorized actions on behalf of administrators.
How do I fix CVE-2013-6028?
To fix CVE-2013-6028, update the Atmail Webmail Server to version 7.2 or later, which addresses these CSRF vulnerabilities.
What actions can attackers perform through CVE-2013-6028?
Attackers can use CVE-2013-6028 to hijack administrator accounts and perform actions such as adding, modifying, or deleting user accounts, as well as stopping the product's service.
Which versions of Atmail Webmail Server are affected by CVE-2013-6028?
CVE-2013-6028 affects Atmail Webmail Server versions prior to 7.2, including several versions in the 6.x and 7.1.x series.
What are the implications of CVE-2013-6028 for users?
Users of affected Atmail Webmail Server versions are at significant risk, as the vulnerability allows for full administrative control to be compromised by malicious actors.