Cross site request forgery (csrf)

2016-02-1015:59:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.7%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CPENameOperatorVersion
moveit_mobilele1.2.0.962

CPE	Name	Operator	Version
	moveit_mobile	le	1.2.0.962

References

packetstormsecurity.com/files/135460/Ipswitch-MOVEit-Mobile-1.2.0.962-Cross-Site-Request-Forgery.html

seclists.org/fulldisclosure/2016/Jan/95

www.profundis-labs.com/advisories/CVE-2015-7678.txt