CVE-2015-6468

CVE-2015-6468 is a CSRF vulnerability in Resource Data Management’s Web-based Data Manager, affected versions prior to 2.2. The issue enables an attacker to hijack an authenticated user’s session and perform unintended actions on trusted pages via CSRF vectors (details not specified in the provid...

PT-2015-7258

Name of the Vulnerable Software and Affected Versions Resource Data Management Data Manager versions prior to 2.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendation...

CVE-2015-6468: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-6470: Undefined Security Weakness

Resource Data Management Data Manager before 2.2 allows remote authenticated users to modify arbitrary passwords via unspecified vectors...

PT-2015-7260

Name of the Vulnerable Software and Affected Versions Resource Data Management Data Manager versions prior to 2.2 Description The issue allows remote authenticated users to modify arbitrary passwords. Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue...