03 Jan 2018
CVE-2017-1000479 - CVE Vulnerability
pfSense versions 2.4.1 and lower are vulnerable to a clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code. See first reference URL for full details. Credits are Yorick Koster. OPNsense, a 2015 fork of pfSense, was not vulnerable since version 16.1.16 released on June 06, 2016. The unprotected web form was removed from the code during an internal security audit under "possibly insecure" suspicions. (CVSS:0.0) (Last Update:2018-01-03)
Vulnerability Details : pfSense versions 2.4.1 and lower are vulnerable to a clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code. See first reference URL for full details. Credits are Yorick Koster. OPNsense, a 2015 fork of pfSense, was not vulnerable since version 16.1.16 released on June 06, 2016. The unprotected web form was removed from the code during an internal security audit under "possibly insecure" suspicions. Publish Date : 2018-01-03 Last Update Date : 2018-01-03 - CVSS Scores & Vulnerability Types
- Products Affected By CVE-2017-1000479
- References For CVE-2017-1000479
| ||||||||||||||||||||||||||||||||||||||||||||||||
- Metasploit Modules Related To CVE-2017-1000479There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information) |