Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr prior to 2.0 Security Update 2 allow remote malicious users to hijack the authentication of administrators, as demonstrated by reconfiguring time settings via a vaconfig/time request.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
novell filr |