Most recent entries from all

cnvd-2017-12580

EUVD-2026-73725

fkie_cve-2017-6038

A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request.

GHSA-phwq-44x5-8j26

gsd-2017-6038

ICSA-17-026-02A — Belden Hirschmann GECKO (Update A)

After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication.CVE-2017-5163 has been assigned to this vulnerability. A CVSS v3 base score of 5.9 has been assigned; the CVSS vector string is (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Web server receives a request, but does not sufficiently verify that the request is being sent to the expected destination.--------- Begin Update A Part 5 of 5 ------- Web application does not sufficiently verify that requests were provided by user who submitted request.CVE-2017-6036 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N ). Non-sensitive information can be obtained anonymously.CVE-2017-6038 has been assigned to this vulnerability. A CVSS v3 base score of 7.1 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L).