Kaspersky.AV.Linux.File.Server.CSRF

description-logoDescription

This indicates an attack attempt against a Cross-Site Request Forgery vulnerability in Kaspersky Anti-Virus for Linux File Server.
The vulnerability is due to insufficient sanitization of user supplied inputs in the application. An attacker may exploit this to cause the server to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected application.

affected-products-logoAffected Products

Kaspersky Labs Anti-Virus for Linux File Servers 8.0.3.297 and prior

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor
http://support.kaspersky.com/13738

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2019-06-13 14.632 Severity:critical:high