Multiple cross-site request forgery (CSRF) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to hijack the authentication of administrators for requests that (1) create a new user account via a save action to tvserver/user/user.do, (2) shutdown a virtual machine, (3) start a virtual machine, (4) restart a virtual machine, or (5) schedule an activity.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-05-07T18:23:00

Updated: 2024-08-07T07:17:25.687Z

Reserved: 2010-05-07T00:00:00

Link: CVE-2009-4849

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-05-07T18:30:01.327

Modified: 2024-11-21T01:10:36.877

Link: CVE-2009-4849

cve-icon Redhat

No data.