KLA10331 SB vulnerability in Snare

A CSRF vulnerability was found in Snare. By exploiting this vulnerability malicious users can hijack administrator auth. This vulnerability can be exploited remotely.

Original advisories

Related products

Snare-for-Windows

Epilog-for-Windows

CVE list

CVE-2010-2594 high

Solution

Update to latest version

Impacts

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• InterSect Alliance Snare Agent versions 3.2.3 and earlier for SolarisInterSect Alliance Snare Agent versions 3.1.7 and earlier for WindowsInterSect Alliance Snare Agent versions 1.5.0 and earlier for Linux and AIXInterSect Alliance Snare Agent versions 1.4 and earlier for IRIXInterSect Alliance Snare Epilog versions 1.5.3 and earlier for WindowsInterSect Alliance Snare Epilog versions 1.2 and earlier for UNIX