Parallels Virtuozzo Containers VZPP Interface Change Pass Cross-Site Request Forgery Vulnerability

info
discussion
exploit
solution
references

Parallels Virtuozzo Containers VZPP Interface Change Pass Cross-Site Request Forgery Vulnerability

Parallels Virtuozzo Containers is prone to a cross-site request-forgery vulnerability.

Exploiting the issue will allow a remote attacker to use a victim's currently active session to change the victim's password. Successful exploits will compromise affected computers.

Virtuozzo Containers 3.0.0-25.4.swsoft is vulnerable; other versions are also affected.