CSRF in Zenprise Device Manager

CVE-2011-4498

Cross-site request forgery (CSRF) vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.006 (43.5th percentile) — read the EPSS interpretation.

Affected products

Zenprise Zenprise_device_manager — versions 6.0, 6.1.0, 6.1.5
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)