Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication of administrators for requests that 1 add arbitrary accounts via the name parameter to interface/rest/accounts/json; turn off the 2 Url matching, 3 DNS Inject...

CVE-2015-2878

The CVE-2015-2878 entry concerns Hexis HawkEye G 3.0.1.4912, where multiple CSRF vulnerabilities exist that let an attacker hijack administrator sessions to perform actions such as adding arbitrary accounts, turning off sensors (Url matching, DNS Inject, IP Redirect), and whitelisting malware MD5...

CVE-2015-2878

Multiple cross-site request forgery CSRF vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication of administrators for requests that 1 add arbitrary accounts via the name parameter to interface/rest/accounts/json; turn off the 2 Url matching, 3 DNS Inject...

PT-2017-6617

Name of the Vulnerable Software and Affected Versions Hexis HawkEye G version 3.0.1.4912 Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This can be achieved through multiple cross-site request forgery CSRF vulnerabilities...

CVE-2015-2878: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication of administrators for requests that 1 add arbitrary accounts via the name parameter to interface/rest/accounts/json; turn off the 2 Url matching, 3 DNS Inject...