CVE-2011-0650

Cross-site request forgery (CSRF) vulnerability in Greenbone Security Assistant (GSA) before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirements for exploiting CVE-2011-0018.

• CWE-352

• http://secunia.com/advisories/43092Not Applicable
• http://www.openvas.org/OVSA20110118.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/515971/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65012
• https://lists.wald.intevation.org/pipermail/openvas-commits/2011-February/010206.htmlMailing List
• https://lists.wald.intevation.org/pipermail/openvas-commits/2011-February/010242.htmlMailing List
• http://secunia.com/advisories/43092Not Applicable
• http://www.openvas.org/OVSA20110118.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/515971/100/0/threaded
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65012
• https://lists.wald.intevation.org/pipermail/openvas-commits/2011-February/010206.htmlMailing List
• https://lists.wald.intevation.org/pipermail/openvas-commits/2011-February/010242.htmlMailing List

Published

Jan 28, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0644SQL injection vulnerability in include/admin/model_field.cla…
• CVE-2011-0645SQL injection vulnerability in data.php in PHPCMS 2008 V2 al…
• CVE-2011-0646SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS …
• CVE-2011-0647The irccd.exe service in EMC Replication Manager Client befo…
• CVE-2011-0648Unspecified vulnerability in EMC Avamar before 5.0.4-30 allo…
• CVE-2011-0649Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2…
• CVE-2011-0651Buffer overflow in the key exchange functionality in Icon La…
• CVE-2011-0652lnsfw1.sys 6.0.2900.5512 in Look 'n' Stop Firewall 2.06p4 an…
• CVE-2011-0653Cross-site scripting (XSS) vulnerability in Microsoft Office…
• CVE-2011-0654Integer underflow in the BowserWriteErrorLogEntry function i…
• CVE-2011-0655Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, a…
• CVE-2011-0656Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010;…