Cross-site request forgery (CSRF) vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication of administrators for requests that modify a password.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-15-351-02 | third party advisory us government resource |
http://www.securityfocus.com/bid/79624 | vdb entry |