Description
Cross-site request forgery (CSRF) vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to hijack the authentication of administrators.
References
- JVN#79284156 third-party-advisory
- 1032516 vdb-entry
- 75067 vdb-entry
- JVNDB-2015-000076 third-party-advisory
- https://support.zoho.com/portal/manageengine/helpcenter/articles/vulnerability-fix-for-fails-to-restrict-access-permissions-cross-site-scripting-cross-site-request-forgery-over-build-10250