Description

Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users.

Remediation

References

CVE-2013-2692

Related Vulnerabilities

Dolphin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-3638)

MySQL CVE-2018-2773 Vulnerability (CVE-2018-2773)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4863)

Oracle JRE CVE-2013-5806 Vulnerability (CVE-2013-5806)

GlassFish Use of Hard-coded Credentials Vulnerability (CVE-2018-14324)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2013-2692