CVE-2010-2268

2010-06-1419:00:00

mitre

www.cve.org

csrf

accoria web server

remote attackers

authentication hijacking

user accounts creation

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

49.5%

JSON

Cross-site request forgery (CSRF) vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to hijack the authentication of administrators for requests that create user accounts.

References

www.ioactive.com/pdfs/AccoriaWebServer.pdf

www.kb.cert.org/vuls/id/245081