CVE-2013-6443 | BDVDB-2026-59557 Detail

Description#

CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protect_from_forgery mechanism and conduct cross-site request forgery (CSRF) attacks via a destructive action in a request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1029606
http://rhn.redhat.com/errata/RHSA-2014-0025.html

Exploit#

No public exploit known

History#

Version 12014-01-23Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.