PT-2016-3822 · Ipswitch · Ipswitch Moveit Mobile

Philipp Rocholl · Publicado 2016-02-10 · Atualizado 2016-02-18 · CVE-2015-7678

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ipswitch MOVEit Mobile versions 1.2.0.962 and earlier

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of unspecified victims. The exact vectors used for the attack are not specified.

Recommendations For Ipswitch MOVEit Mobile versions 1.2.0.962 and earlier, update to a version later than 1.2.0.962 to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2015-7678

Produtos afetados

Ipswitch Moveit Mobile

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-7678 · Nota de Segurança
• http://packetstormsecurity.com/files/135460/Ipswitch-MOVEit-Mobile-1.2.0.962-Cross-Site-Request-Forgery.html · Nota
• http://seclists.org/fulldisclosure/2016/Jan/95 · Nota
• https://profundis-labs.com/advisories/CVE-2015-7678.txt · Nota