CVE-2014-1211

CWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources
Severity
6.8MEDIUM
EPSS
0.3%
top 46.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Vmware Vcloud Director
Timeline
PublishedJan 17
Latest updateMay 17

Description

Cross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5.1.x before 5.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDvmware/vcloud_director5.1.0, 5.1.1, 5.1.2+2

🔴Vulnerability Details

2
GHSA
GHSA-g43v-c4gp-q72h: Cross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5↗2022-05-17
▶
CVEList
CVE-2014-1211: Cross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5↗2014-01-17
▶
CVE-2014-1211 (MEDIUM CVSS 6.8) | Cross-site request forgery (CSRF) v | cvebase.io