Authtake
Monthly
Cross-site request forgery in AuthTake Technology Inc.'s Authtake application (v1.3 up to but not including v1.4) lets remote attackers forge requests through a logged-in victim's session, a weakness the TR-CERT advisory characterizes as enabling encryption brute forcing. Rated CVSS 3.1 6.5 (Medium) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, the flaw is integrity-only - no confidentiality or availability impact - and requires the victim to hold an active authenticated session and be tricked into loading attacker-controlled content; no public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Cross-site request forgery in AuthTake Technology Inc.'s Authtake application (v1.3 up to but not including v1.4) lets remote attackers forge requests through a logged-in victim's session, a weakness the TR-CERT advisory characterizes as enabling encryption brute forcing. Rated CVSS 3.1 6.5 (Medium) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, the flaw is integrity-only - no confidentiality or availability impact - and requires the victim to hold an active authenticated session and be tricked into loading attacker-controlled content; no public exploit identified at time of analysis, and the issue is not listed in CISA KEV.