Published: 30/09/2014 Updated: 01/10/2014

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote malicious users to hijack the authentication of administrators for requests that (1) shutdown or (2) reboot the server via a request to admin/system_shutdown.html.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openfiler openfiler 2.99.1

<!-- # Exploit Title: DoS via CSRF in openfiler # Exploit author: Dolev Farhi @dolevff # Date 07/05/2014 # Vendor homepage: wwwopenfilercom # Affected Software version: 2991 # Alerted vendor: 7514 # CVE: N/A Software Description ===================== Openfiler is a network storage operating system With the features we built int ...

Openfiler version 2991 suffers from a denial of service vulnerability ...

CWE-352 http://www.securityfocus.com/bid/70163 http://packetstormsecurity.com/files/128455/Openfiler-2.99.1-Denial-Of-Service.html http://seclists.org/fulldisclosure/2014/Sep/109 https://nvd.nist.gov https://www.exploit-db.com/exploits/34818/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-7190

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect