Posts tagged vuln

CSRF vulnerability at CloudAtCost.com

CloudAtCost.com provides low-cost virtual machines hosted in Canada. panel.cloudatcost.com is the management interface, where customers can install OS images, access a console, etc.

A square black indicator light labelled SYSTEM SECURITY BREACH, mounted in a blue plastic panel — System security breach by Jeff Keyzer, CC BY-SA 2.0; resized

A cross-site request forgery (CSRF) vulnerability was discovered in this web application. If a customer could be tricked into visiting a crafted URL while logged in, an attacker could change the victim’s password, gaining access to the management interface.

Posted Dec 11, 2014 /post/csrf-vulnerability-at-cloudatcost-com

csrf vuln infosec