CVEvulnerability
CVE-2016-10206
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-03-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack the authentication of users for requests that change passwords and possibly have unspecified other impact as demonstrated by a crafted user action request to index.php.
Affected configurations
• zoneminder zoneminder (<= 1.30.0)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://www.openwall.com/lists/oss-security/2017/02/05/1 Exploit, Mailing List
- http://www.securityfocus.com/bid/97114 www.securityfocus.com
- https://www.foxmole.com/advisories/foxmole-2016-07-05.txt Exploit, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/02/05/1 Exploit, Mailing List
- http://www.securityfocus.com/bid/97114 www.securityfocus.com
- https://www.foxmole.com/advisories/foxmole-2016-07-05.txt Exploit, Third Party Advisory