| Package | Affected versions | Patched versions |
|---|---|---|
| greenbone security assistant | ≤ 2.0 |
Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirements for exploiting CVE-2011-0018.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free