Description (CNA)
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that (a) change passwords or (b) change configurations.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44592
- http://www.securityfocus.com/bid/30791
- http://jvn.jp/en/jp/JVN83428818/index.html
- http://secunia.com/advisories/31574
- http://wiz.syscon.co.jp/Details.htm
- http://secunia.com/advisories/31582
ADP enrichment
No English description supplied.