CVE ID:	CVE-2014-2327
Description:	Cross-site request forgery (CSRF) vulnerability in Cacti 0.8.7g, 0.8.8b, and earlier allows remote attackers to hijack the authentication of users for unspecified commands, as demonstrated by requests that (1) modify binary files, (2) modify configurations, or (3) add arbitrary users.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2327 BugTraq ID: 66392 http://www.securityfocus.com/bid/66392 Bugtraq: 20140324 Deutsche Telekom CERT Advisory [DTC-A-20140324-001] vulnerabilities in cacti (Google Search) http://www.securityfocus.com/archive/1/531588 Debian Security Information: DSA-2970 (Google Search) http://www.debian.org/security/2014/dsa-2970 https://security.gentoo.org/glsa/201509-03 http://jvn.jp/en/jp/JVN55076671/index.html http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002239.html http://secunia.com/advisories/59203 SuSE Security Announcement: openSUSE-SU-2015:0479 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html