CVE-2016-0891
HighSummary
Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before version 3.7 allow remote attackers to hijack the authentication of administrators.
Risk Assessment
Attackers can exploit these vulnerabilities to gain unauthorized access to the system, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to version 3.7 or later to eliminate these vulnerabilities and implement additional security measures against CSRF.
Other vulnerabilities in EMC ViPR SRM
See all- CVE-2016-6641High
Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before version 3.7.2 allows remote authenticated users to inject arbitrary web scripts or HTML via unspecified vectors.
- CVE-2016-0922Critical
EMC ViPR SRM versions before 3.7.2 do not restrict the number of password-authentication attempts, making it easier for remote attackers to gain access via a brute-force guessing attack.
Original NVD description (English source)
Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators.