CVE-2010-2594: Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare A

InterSect Alliance Snare Agent and Snare Epilog software contain multiple CSRF vulnerabilities (cross-site request forgery, a type of attack where an attacker tricks a logged-in user into performing unwanted actions). These vulnerabilities in the web management interface allow attackers to hijack administrator authentication to change passwords or listening ports across multiple versions on different operating systems.