CVE-2010-2268 Cross-site request forgery in n/a
Remote attackers can hijack administrator sessions to create user accounts via CSRF in Accoria Web Server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2010-2268?
CVE-2010-2268 is a medium-severity vulnerability in n/a, published on 14 Jun 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Cross-site request forgery (CSRF) vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to hijack the authentication of administrators for requests that create user accounts.
Weakness: CWE-352
Which versions are affected by CVE-2010-2268?
It affects 1 product.
Products include Accoria Rock Web Server.
How do I fix CVE-2010-2268?
No fix has been published for CVE-2010-2268 yet. Limit exposure of the affected software until one is available.
Is CVE-2010-2268 being exploited?
There is no known exploitation of CVE-2010-2268 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-x286-r6h6-3gg7.