CacheGuard OS Cross-Site Request Forgery (CVE-2014-4865)

CacheGuard OS Cross-Site Request Forgery (CVE-2014-4865)

Release date:
Updated on:

Affected Systems:
CacheGuard OS 5.7.7
Description:
Bugtraq id: 69731
CVE (CAN) ID: CVE-2014-4865

CacheGuard OS is a web traffic management solution.

CacheGuard OS v5.7.7 does not have a valid authentication request source, and there is a cross-site Request Forgery Vulnerability in/gui/password-wadmin.apl implementation. unauthenticated remote attackers can exploit this vulnerability to modify or escalate permissions.

<* Source: William Costa

Link: http://www.kb.cert.org/vuls/id/241508
*>

Suggestion:
Vendor patch:

CacheGuard
----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.cacheguard.com/

This article permanently updates the link address: