resource_data_management_data_manager - MidnightBSD Security Advisories

Advisories for resource_data_management_data_manager

CVE-2015-6468 MEDIUM

Cross-site request forgery (CSRF) vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-352,

Products Affected

Vendor	Product	Version
resource_data_management_data_manager	data_manager	*

CVE-2015-6470 MEDIUM

Resource Data Management Data Manager before 2.2 allows remote authenticated users to modify arbitrary passwords via unspecified vectors.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-noinfo,

Products Affected

Vendor	Product	Version
resource_data_management_data_manager	data_manager	*