CVE-2016-0891

Mô tả

Tham khảo

• packetstormsecurity.com/files/136837/EMC-ViPR-SRM-Cross-Site-Request-Forgery.html · Exploit
• seclists.org/bugtraq/2016/Apr/106 · Third Party Advisory
• seclists.org/fulldisclosure/2016/Apr/89 · Third Party Advisory
• securityfocus.com/archive/1/538207/100/0/threaded
• exploit-db.com/exploits/39738 · Exploit
• securify.nl/advisory/SFY20141109/emc_m_r__watch4net__lacks_c%20ross_site_request_forgery_protection.html · Exploit

Lỗ hổng khác của vipr srm

• CVE-2016-6647TRUNG BÌNH 5.4Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HT…
• CVE-2016-6643TRUNG BÌNH 6.1Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to inject arbitrary web script or HTML via uns…
• CVE-2016-6642TRUNG BÌNH 6.1Cross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to hijack the authentication of adminis…
• CVE-2016-6641CAO 7.6Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated users to inject arbitrary web script or HT…
• CVE-2016-0922NGHIÊM TRỌNG 9.8EMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which makes it easier for remote attackers to ob…