Cross site request forgery (csrf)

2015-12-1521:59:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.141 Low

EPSS

Percentile

95.7%

JSON

The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request.

References

www.securityfocus.com/bid/78729

www.zerodayinitiative.com/advisories/ZDI-15-621