CVE:CVE-2012-4943
CNNVD:CNNVD-201211-167
FleetCommander是一款基于WEB的应用。
Agile FleetCommander和FleetCommander Kiosk 4.08之前版本中存在多个跨站请求伪造漏洞。远程攻击者可利用该漏洞劫持任意用户的认证信息从而修改（1）密码，（2）账户，或者（3）权限。
solution:Upgrade agilefleet fleetcommander to a higher version than 4.0,and avoid the version (,4.0]; Upgrade agilefleet fleetcommander_kiosk to a higher version than 4.0,and avoid the version (,4.0]