CVE-2016-2082: CSRF
Published Jul 3, 2016
·Updated
Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
8 affected components
VMware vRealize Log Insight=2.0
VMware vRealize Log Insight=2.0.5
VMware vRealize Log Insight=2.5
VMware vRealize Log Insight=2.5.1
VMware vRealize Log Insight=3.0
VMware vRealize Log Insight=3.0.1
VMware vRealize Log Insight=3.3
VMware vRealize Log Insight=3.3.1
Remediation
Event History
Jul 3, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2082?
CVE-2016-2082 is classified as a medium severity vulnerability due to the potential for cross-site request forgery attacks.
2
How do I fix CVE-2016-2082?
To remediate CVE-2016-2082, upgrade VMware vRealize Log Insight to version 3.3.2 or later.
3
What products are affected by CVE-2016-2082?
CVE-2016-2082 affects VMware vRealize Log Insight versions 2.x and 3.x prior to 3.3.2.
4
What type of vulnerability is CVE-2016-2082?
CVE-2016-2082 is a cross-site request forgery (CSRF) vulnerability.
5
Can CVE-2016-2082 lead to unauthorized access?
Yes, CVE-2016-2082 could allow attackers to hijack the authentication of users, leading to unauthorized access.