Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Websense | V-Series Appliances | <= 7.7 |
Related Weaknesses (CWE)
References
- http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRVendor Advisory
- http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in-TRVendor Advisory
FAQ
What is CVE-2015-2770?
CVE-2015-2770 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Cross-site request forgery (CSRF) vulnerability in the command line page in Websense TRITON V-Series appliances before 8.0.0 allows remote attackers to hijack the authentication of unspecified victims...
How severe is CVE-2015-2770?
CVE-2015-2770 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-2770?
Check the references section above for vendor advisories and patch information. Affected products include: Websense V-Series Appliances.