Rapid 7 Archives

CVE-2012-6493: Nexpose Security Console CSRF Vulnerability

2012

Product: Nexpose Security ConsoleVendor: Rapid7Version: < 5.5.3Tested Version: 5.5.1Vendor Notified Date: December 19, 2012Release Date: January 2, 2013Risk: HighAuthentication: None requiredRemote: Yes

CVE-2012-6494 – Nexpose Security Console – Session Hijacking

2012

CVE-2012-6494 – Nexpose Security Console – Session Hijacking Product: Nexpose Security Console Vendor: Rapid7 Version: < 5.5.3 Tested Version: 5.5.1 Vendor Notified Date: December 19, 2012 Release Date: January 2, 2013 Risk: Medium Authentication: Access to logs required. Remote: Yes