Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2020-37144

Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)

Description

Exagate SYSGuard 6001 contains a cross-site request forgery vulnerability that allows attackers to create unauthorized admin accounts through a crafted HTML form. Attackers can trick users into submitting a malicious form to /kulyon.php that adds a new user with administrative privileges without the victim's consent.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Exagate Sysguard 6001

  • 6001affected

References