What’s Vulnerable › Vulnerabilities

CVE-2016-1607

• Severity: high (CVSS 7.2 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2016-08-01 · updated 2026-06-17
• Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers to hijack the authentication of administrators, as demonstrated by reconfiguring time settings via a vaconfig/time request.

Affected products

• Novell Filr: through 1.2; through 2.0

References

• http://seclists.org/bugtraq/2016/Jul/119
• http://www.securityfocus.com/bid/92113
• https://download.novell.com/Download?buildid=3V-3ArYN85I~
• https://www.exploit-db.com/exploits/40161/
• https://www.novell.com/support/kb/doc.php?id=7017786
• http://seclists.org/bugtraq/2016/Jul/119
• http://www.securityfocus.com/bid/92113
• https://download.novell.com/Download?buildid=3V-3ArYN85I~
• https://www.exploit-db.com/exploits/40161/
• https://www.novell.com/support/kb/doc.php?id=7017786

Get alerted when CVE-2016-1607 or the next vulnerability affects your stack