Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2019-13497

Published: 04/11/2019 Updated: 05/11/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Cloud Access Manager

Vulnerability Summary

One Identity Cloud Access Manager prior to 8.1.4 Hotfix 1 allows CSRF for logout requests.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oneidentity cloud access manager 8.1.4

oneidentity cloud access manager

Github Repositories

https://github.com/FurqanKhan1/CVE-2019-13497

CVE-2019-13497 Exploit Title: Cross Site Request Forgery (CSRF) Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: wwwoneidentitycom/ Software Link: wwwoneidentitycom/products/cloud-access-manager/ Version: 813 Tested on: Kali Linux , Windows 7 ,Ubantu 1604 To exploit this vulnerability an attacker can simply create a HTML form that would submi

References

CWE-352https://support.oneidentity.com/cloud-access-manager/kb/311391/cloud-access-manager-8-1-4-hotfix-1https://github.com/FurqanKhan1/CVE-2019-13497https://nvd.nist.govhttps://github.com/FurqanKhan1/CVE-2019-13497
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
validationCVE-2024-34413CVE-2024-34089CVE-2024-33408localSQLCVE-2024-0402CVE-2024-33910CVE-2024-31848
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook