Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and previous versions on Solaris, Snare Agent 3.1.7 and previous versions on Windows, Snare Agent 1.5.0 and previous versions on Linux and AIX, Snare Agent 1.4 and previous versions on IRIX, Snare Epilog 1.5.3 and previous versions on Windows, and Snare Epilog 1.2 and previous versions on UNIX allow remote malicious users to hijack the authentication of administrators for requests that (1) change the password or (2) change the listening port.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
intersect alliance snare agent |
||
intersect alliance snare agent 2.0 |
||
intersect alliance snare agent 2.1 |
||
intersect alliance snare agent 2.3 |
||
intersect alliance snare agent 2.4 |
||
intersect alliance snare agent 2.5 |
||
intersect alliance snare agent 2.5.2 |
||
intersect alliance snare agent 2.5.3 |
||
intersect alliance snare agent 2.5.4 |
||
intersect alliance snare agent 2.5.6 |
||
intersect alliance snare agent 2.5.7 |
||
intersect alliance snare agent 3.0.0 |
||
intersect alliance snare agent 3.1.0 |
||
intersect alliance snare agent 3.2.0 |
||
intersect alliance snare agent 3.2.1 |
||
intersect alliance snare agent 3.2.2 |
||
intersect alliance snare agent 3.1.2 |
||
intersect alliance snare agent 3.1.3 |
||
intersect alliance snare agent 3.1.4 |
||
intersect alliance snare agent 3.1.5 |
||
intersect alliance snare agent 3.1.6 |
||
intersect alliance snare agent 0.9.2 |
||
intersect alliance snare agent 0.9.6 |
||
intersect alliance snare agent 0.9.7 |
||
intersect alliance snare agent 0.9.7a |
||
intersect alliance snare agent 0.9.8 |
||
intersect alliance snare agent 1.0 |
||
intersect alliance snare agent 1.1 |
||
intersect alliance snare agent 1.2 |
||
intersect alliance snare agent 1.3 |
||
intersect alliance snare agent 1.4 |
||
intersect alliance snare agent 1.4.1 |
||
intersect alliance snare epilog |
||
intersect alliance snare epilog 1.1 |
||
intersect alliance snare epilog 1.2 |
||
intersect alliance snare epilog 1.3 |
||
intersect alliance snare epilog 1.3.1 |
||
intersect alliance snare epilog 1.3.3 |
||
intersect alliance snare epilog 1.4.0 |
||
intersect alliance snare epilog 1.5.0 |
||
intersect alliance snare epilog 1.5.1 |
||
intersect alliance snare epilog 1.5.2 |
||
intersect alliance snare agent 1.0.1 |
||
intersect alliance snare agent 1.1.0 |
||
intersect alliance snare agent 1.1.1 |
||
intersect alliance snare agent 1.1.2 |
Vulmon