CWE Code: 352
Vulnerability Type: privilege_escalation
CVSS Score: 5.8
CWE Name:  Cross-Site Request Forgery (CSRF)
Summary: a cross-site request forgery (csrf) vulnerability in 3xlogic infinias access control through 6.6.9586.0 allows remote attackers to execute malicious and unauthorized actions (e.g., delete application users) by sending a crafted html document or encoded url to a user that the website trusts. the user needs to have an active privileged session.
Access Authentication: NONE
Access Complexity: UNKNOWN
Access Vector: UNKNOWN
Impact (C/I/A): NONE/NONE/NONE
Published Date: 2019-11-14
Last Modified Date: 2019-11-14