REDHAT-BUG-895345: CSRF
ManageIQ EVM is vulnerable to Cross-Site Request Forgery (CSRF) attacks. A remote attacker could provide a specially-crafted web page that, when visited by a user logged in to ManageIQ EVM, could allow the attacker to trigger actions on the ManageIQ EVM server in the context of the user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-895345?
The severity of REDHAT-BUG-895345 is classified as high due to its potential for serious exploitation via Cross-Site Request Forgery.
How do I fix REDHAT-BUG-895345?
To fix REDHAT-BUG-895345, ensure that your ManageIQ EVM software is updated to the latest version that includes security patches against CSRF vulnerabilities.
What are the potential impacts of REDHAT-BUG-895345?
The potential impacts of REDHAT-BUG-895345 include unauthorized actions being performed on the ManageIQ EVM server by an attacker, affecting user accounts and data integrity.
Who is affected by REDHAT-BUG-895345?
Users of ManageIQ EVM, especially those with active sessions, are affected by REDHAT-BUG-895345.
Is REDHAT-BUG-895345 a known issue?
Yes, REDHAT-BUG-895345 is a known issue, and it has been documented in security reports regarding vulnerabilities in ManageIQ EVM.