CVE-2016-8369
HighSummary
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient verification of whether a request was intentionally provided by the user. This leads to a vulnerability to Cross-Site Request Forgery (CSRF) attacks.
Risk Assessment
The organization may be exposed to unauthorized actions by users, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update the application to the latest version that improves user request verification and implement additional safeguards against CSRF attacks.
Other vulnerabilities in Lynxspring JENEsys BAS Bridge
See all- CVE-2016-8361High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to the use of a hard-coded username without a password, allowing an attacker to access the system without authentication.
- CVE-2016-8357High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands.
- CVE-2016-8378Critical
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient safeguards in the application's database for protecting credentials.
Original NVD description (English source)
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request (CROSS-SITE REQUEST FORGERY).