CVE-2017-9810: CSRF
There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312). This would allow an attacker to submit authenticated requests when an authenticated user browses an attacker-controlled domain.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9810?
CVE-2017-9810 is classified as a high-severity vulnerability due to the potential for unauthorized actions on behalf of authenticated users.
How do I fix CVE-2017-9810?
To fix CVE-2017-9810, upgrade to Kaspersky Anti-Virus for Linux File Server version 8.0.4.312 or later, which includes Anti-CSRF tokens in forms.
What types of attacks can exploit CVE-2017-9810?
CVE-2017-9810 can be exploited through Cross-Site Request Forgery (CSRF) attacks, allowing unauthorized requests to be sent by an attacker.
Which versions of Kaspersky Anti-Virus are affected by CVE-2017-9810?
CVE-2017-9810 affects Kaspersky Anti-Virus for Linux File Server versions up to and including 8.0.3.297.
Is there a workaround for CVE-2017-9810?
There is no official workaround for CVE-2017-9810; the recommended solution is to update to a fixed version.