CVEvulnerability
CVE-2015-6493
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Affected configurations
• infinite automation systems mango automation 2.5.0
• infinite automation systems mango automation 2.5.5
• infinite automation systems mango automation 2.6.0
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 Patch, Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-300-02 Patch, Third Party Advisory, US Government Resource