PT-2020-7467 · Opsview+1 · Opsview+1

Published 2020-01-02 · Updated 2020-01-07 · CVE-2013-3935

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Opsview versions prior to 4.4.1 Opsview Core versions prior to 20130522

Description: A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via unspecified vectors.

Recommendations: For Opsview versions prior to 4.4.1, update to version 4.4.1 or later to resolve the issue. For Opsview Core versions prior to 20130522, update to version 20130522 or later to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2013-3935

Affected Products

Opsview

Opsview Core

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2013-3935 · Security Note
• http://docs.opsview.com/doku.php?id=opsview-core:changes#opsview_core_20130822 · Note
• https://t.me/cibsecurity/8946 · Telegram Post
• http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes · Note