CVE-2012-2602

State: Published
Severity: Not scored
Published: Aug 12, 2012
Updated: Sep 16, 2024
Reserved: May 9, 2012

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create user accounts via CreateUserStepContainer actions to Admin/Accounts/Add/OrionAccount.aspx or (2) modify account privileges via a ynAdminRights action to Admin/Accounts/EditAccount.aspx.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

VU#174119third-party-advisory
http://www.solarwinds.com/documentation/Orion/docs/ReleaseNotes/releaseNotes.htm
50004third-party-advisory
54624vdb-entry
20011exploit
84116vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.