CVE-2013-6028 Cross-site request forgery in n/a
Remote attackers can hijack administrator sessions to manage user accounts or stop the service via CSRF attacks.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2013-6028?
CVE-2013-6028 is a medium-severity vulnerability in n/a, published on 12 Jan 2014. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts, (2) modify user accounts, (3) delete user accounts, or (4) stop the product's service.
Weakness: CWE-352
Which versions are affected by CVE-2013-6028?
It affects 1 product.
Products include Atmail Atmail.
How do I fix CVE-2013-6028?
No fix has been published for CVE-2013-6028 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-6028 being exploited?
There is no known exploitation of CVE-2013-6028 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-qhx7-mcgr-x6cr.