Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirements for exploiting CVE-2011-0018.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-01-28T15:00:00

Updated: 2024-08-06T21:58:26.004Z

Reserved: 2011-01-26T00:00:00

Link: CVE-2011-0650

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2011-01-28T16:00:04.720

Modified: 2024-11-21T01:24:32.313

Link: CVE-2011-0650

cve-icon Redhat

No data.