CVE-2013-6173 Cross-site request forgery in n/a
Remote attackers can hijack administrator sessions to perform administrative actions in xAdmin or xDashboard via CSRF.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2013-6173?
CVE-2013-6173 is a medium-severity vulnerability in n/a, published on 21 Nov 2013. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
Multiple cross-site request forgery (CSRF) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish Engine, and Enterprise Edition Compuset Engine, allow remote attackers to hijack the authentication of administrators for requests that perform administrative actions in (1) xAdmin or (2) xDashboard.
Weakness: CWE-352
Which versions are affected by CVE-2013-6173?
It affects 1 product.
Products include Emc Document Sciences Xpression.
How do I fix CVE-2013-6173?
No fix has been published for CVE-2013-6173 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-6173 being exploited?
There is no known exploitation of CVE-2013-6173 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-5qh4-f2hp-wrvj.