CVE-2016-7123: CSRF
Published Sep 2, 2016
·Updated
Cross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before 2.1.15 allows remote attackers to hijack the authentication of administrators.
Affected Software
1 affected component
GNU Mailman<=2.1.14
Event History
Sep 2, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-7123?
CVE-2016-7123 is classified as a high severity vulnerability due to its potential for remote attackers to hijack administrator authentication.
2
How do I fix CVE-2016-7123?
To fix CVE-2016-7123, upgrade GNU Mailman to version 2.1.15 or later to mitigate the CSRF vulnerability.
3
Who is affected by CVE-2016-7123?
Any installation of GNU Mailman prior to version 2.1.15 is at risk from CVE-2016-7123.
4
What type of vulnerability is CVE-2016-7123?
CVE-2016-7123 is a Cross-site Request Forgery (CSRF) vulnerability targeting the admin web interface.
5
Can CVE-2016-7123 be exploited remotely?
Yes, CVE-2016-7123 allows remote attackers to exploit the vulnerability to hijack administrator sessions.