Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)
Vulnerability Description
FlexNet Publisher 11.12.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can craft a malicious HTML form to trick authenticated users into submitting a request that creates a new local admin account with a predefined password.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
Flexera FlexNet Publisher（FLEXlm） 跨站请求伪造漏洞
Vulnerability Description
Flexera FlexNet Publisher（FLEXlm）是美国Flexera公司的一款授权关系管理解决方案（Entitlement Relationship Management Solution）中的软件授权管理核心组件。该产品可为软件与硬件生产商提供定价、打包和定制软件授权期限。 Flexera FlexNet Publisher（FLEXlm） 11.12.1版本存在跨站请求伪造漏洞，该漏洞源于跨站请求伪造，可能导致攻击者创建具有预定义密码的新本地管理员账户。
CVSS Information
N/A
Vulnerability Type
N/A