5 Identity Threat Detection & Response Must-Haves for Super SaaS Security

Identity-based attacks are on the rise. Attackers are targeting identities with compromised credentials, hijacked authentication methods, and misused privileges. While many threat detection solutions focus on cloud, endpoint, and network threats, they overlook the unique risks posed by SaaS...

PT-2019-17923

Name of the Vulnerable Software and Affected Versions Category Specific RSS feed Subscription versions v2.0 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators. The attack vector is not specified. Recommendations For...

CVE-2015-2143

Multiple cross-site request forgery CSRF vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown parameters...

CVE-2017-7990: Cross-Site Request Forgery (CSRF)

The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp...

Ubuntu 14.04 LTS / 16.04 LTS : curl vulnerabilities (USN-3123-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3123-1 advisory. It was discovered that curl incorrectly reused client certificates when built with NSS. A remote attacker could possibly use this issue to...

PT-2013-5969

Name of the Vulnerable Software and Affected Versions HP Operations Orchestration versions prior to 9 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For HP Operations Orchestration versions prior ...

PT-2011-2614

Name of the Vulnerable Software and Affected Versions WP-reCAPTCHA plugin version 2.9.8.2 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the configuration page of the WP-reCAPTCHA plugin for WordPress. These vulnerabilities allow remote attackers to...

PT-2010-5240

Name of the Vulnerable Software and Affected Versions HP Insight Control Power Management versions prior to 6.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions prior to 6.2, update to...