Description
FlexNet Publisher 11.12.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can craft a malicious HTML form to trick authenticated users into submitting a request that creates a new local admin account with a predefined password.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Flexera Software | FlexNet Publisher | 11.12.1 | — |
References
- ExploitDB-47986 exploit
- Flexera Software Homepage product
- FlexNet Licensing Product Page product
- VulnCheck Advisory: FlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin) third-party-advisory