Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Secure Computing SnapGear Management Console SG560 3.1.5 Cross-Site Request Forgery via Admin Users
Vulnerability Description
SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft a malicious web page that automatically submits a form to create a new super user account with full administrative privileges when a logged-in user visits the page.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
SnapGear Management Console SG560 跨站请求伪造漏洞
Vulnerability Description
SnapGear Management Console SG560是SnapGear公司的一款多功能网络安全网关。 SnapGear Management Console SG560存在跨站请求伪造漏洞，该漏洞源于容易受到跨站请求伪造攻击，可能导致创建具有完全权限的新超级用户账户。
CVSS Information
N/A
Vulnerability Type
N/A