ID: 6619
Title: Fixed missing CSRF protection for master control AJAX calls
Component: Multisite
Level: 1
Class: Security fix
Version: 1.6.0i1
The AJAX calls used by the master control snapin were not correctly using
CSRF tokens to protect logged in users against malicious links that could
trigger actions.
CMK-963