CVE-2012-6493 - CVE House
Back to Database
Status published Medium CVE-2012-6493

Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console...

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2012-6493

Credits & Attribution

No credits recorded in the NVD database.

References

More from rapid7

View All →
CVE-2017-15084
The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout...
Medium 6.5
CVE-2012-6494
Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which...
Medium 6.1

Affected Vendor

Affected Software

nexpose
Vulnerable Versions:
0, 5.4, 5.4.1, 5.4.2, 5.4.3, 5.4.4, 5.4.5, 5.4.6, 5.4.7, 5.4.8, 5.4.9, 5.4.10, 5.4.11, 5.4.12, 5.5.1

Timeline

Official Publish: February 4th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.