Blind Site-to-Site Request Forgery Vulnerability in Satellite Server

CVE-2022-4130 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by modifying the Referer header in an HTTP request of specific resources in the server.

Learn more about our Cis Benchmark Audit For Server Software.