CVE-2016-0891

概要

参考情報

• packetstormsecurity.com/files/136837/EMC-ViPR-SRM-Cross-Site-Request-Forgery.html · Exploit
• seclists.org/bugtraq/2016/Apr/106 · Third Party Advisory
• seclists.org/fulldisclosure/2016/Apr/89 · Third Party Advisory
• securityfocus.com/archive/1/538207/100/0/threaded
• exploit-db.com/exploits/39738 · Exploit
• securify.nl/advisory/SFY20141109/emc_m_r__watch4net__lacks_c%20ross_site_request_forgery_protection.html · Exploit

vipr srm のその他の脆弱性

• CVE-2016-6647中 5.4Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HT…
• CVE-2016-6643中 6.1Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via uns…
• CVE-2016-6642中 6.1Cross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of adminis…
• CVE-2016-6641高 7.6Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HT…
• CVE-2016-0922緊急 9.8EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to ob…