CVE-2015-4460: Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A....

Security readout for executives and security teams

CVE-2015-4460 is a CSRF issue in B.A.S C2Box administration. If an administrator is already logged in and is tricked into visiting attacker-controlled content, the attacker could cause an administrator account to be added. Business risk is highest for legacy C2Box deployments with browser-accessible admin panels. Exposure is likely limited to organizations still running B.A.S C2Box versions before 4.0.0 r19171. Risk increases when the management interface is reachable by administrators through general-purpose browsing environments or from untrusted networks. Prioritize if C2Box is present in the environment, especially if it manages sensitive systems. The issue can lead to unauthorized administrator creation, but exploitation requires administrator interaction and the supplied sources do not confirm active exploitation. Mitigation focus: Identify any B.A.S C2Box deployments and their exact versions.; Upgrade to 4.0.0 r19171 or later if vendor guidance confirms remediation.; Restrict administrative interface access to trusted management networks..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.