CVE-2013-7107: CSRF
Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspecified vectors, as demonstrated by bypassing authentication requirements for CVE-2013-7106.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7107?
CVE-2013-7107 is classified as a medium severity vulnerability that allows cross-site request forgery (CSRF).
How do I fix CVE-2013-7107?
To fix CVE-2013-7107, users should upgrade Icinga to version 1.10.3 or later, which addresses this CSRF vulnerability.
What versions of Icinga are affected by CVE-2013-7107?
CVE-2013-7107 affects Icinga versions 0.8.0 to 1.10.2 inclusive.
Can CVE-2013-7107 lead to authentication hijacking?
Yes, CVE-2013-7107 can allow remote attackers to hijack user authentication for unspecified commands.
What type of attack does CVE-2013-7107 involve?
CVE-2013-7107 involves a cross-site request forgery (CSRF) attack due to insufficient verification of user requests.