Description
Cross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5.1.x before 5.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout.
References
- 102198 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2014-0001.html
- 64993 vdb-entry
- 1029645 vdb-entry
- vmware-vcloud-cve20141211-csrf(90560) vdb-entry