ID de Prueba:	1.3.6.1.4.1.25623.1.0.902066
Categoría:	Web application abuses
Título:	Brekeke PBX CSRF Vulnerability
Resumen:	Brekeke PBX is prone to a cross-site request forgery (CSRF) vulnerability.
Descripción:	Summary: Brekeke PBX is prone to a cross-site request forgery (CSRF) vulnerability. Vulnerability Insight: The flaw exists in the application which fails to perform validity checks on certain 'HTTP reqests', which allows an attacker to hijack the authentication of users for requests that change passwords via the pbxadmin.web.PbxUserEdit bean. Vulnerability Impact: Successful exploitation will allow attackers to change the administrator's password by tricking a logged in administrator into visiting a malicious web site. Affected Software/OS: Brekeke PBX version 2.4.4.8. Solution: Upgrade to Brekeke PBX version 2.4.6.7 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2114 http://cross-site-scripting.blogspot.com/2010/05/brekeke-pbx-2448-cross-site-request.html http://osvdb.org/64950 http://secunia.com/advisories/39952
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.