CVE-2015-6545: CSRF
Published Sep 3, 2015
·Updated
Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action.
Affected Software
1 affected component
Webgroupmedia Cerb<=7.0.3
Event History
Sep 3, 2015
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6545?
CVE-2015-6545 is classified as a medium severity vulnerability.
2
How do I fix CVE-2015-6545?
To fix CVE-2015-6545, you should upgrade Cerb to version 7.0.4 or later.
3
What is the impact of CVE-2015-6545?
CVE-2015-6545 allows remote attackers to hijack administrator authentication and potentially add malicious administrator accounts.
4
Which versions of Cerb are affected by CVE-2015-6545?
Cerb versions prior to 7.0.4, specifically up to 7.0.3, are affected by CVE-2015-6545.
5
Can CVE-2015-6545 be exploited without user interaction?
Yes, CVE-2015-6545 can be exploited remotely without requiring user interaction.