Lucene search

Japan Vulnerability NotesJVN:79284156

HistoryJun 05, 2015 - 12:00 a.m.

JVN#79284156: NetFlow Analyzer vulnerable to cross-site request forgery

2015-06-0500:00:00

Japan Vulnerability Notes

jvn.jp

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.003

Percentile

70.2%

JSON

NetFlow Analyzer provided by Zoho Corporation is a traffic analysis tool. NetFlow Analyzer contains a cross-site request forgery vulnerability.

Impact

If a user views a malicious page while logged in, various administrative functions may be performed.

Solution

Update the software build and apply the patch
Update the software to build 10250 and then apply the patch according to the information provided by the developer.

Products Affected

NetFlow Analyzer build 10250 and earlier

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.003

Percentile

70.2%

JSON

Related for JVN:79284156