EUVD-2012-4534

Malware in sbrugna...

Code injection

The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2012-4608

Cross-site request forgery CSRF vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2012-4609

The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

PT-2012-5513

Name of the Vulnerable Software and Affected Versions EMC RSA NetWitness Informer versions prior to 2.0.5.6 Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors, affecting the web interface. Recommendations For versions prior to 2.0.5.6, update to...

PT-2012-5512

Name of the Vulnerable Software and Affected Versions EMC RSA NetWitness Informer versions prior to 2.0.5.6 Description A cross-site request forgery CSRF issue exists in the web interface, allowing remote attackers to hijack the authentication of arbitrary users. Recommendations For versions prio...

CVE-2012-4609: Improper Input Validation

The web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2012-4608: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web interface in EMC RSA NetWitness Informer before 2.0.5.6 allows remote attackers to hijack the authentication of arbitrary users...