CSRF in Ibm Software Use Analysis
CVE-2013-0452
Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format (AMF) messages.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (46.8th percentile) — read the EPSS interpretation.
Affected products
- Ibm Software_use_analysis
- Ibm Tivoli_endpoint_manager — versions 8.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)