CVEvulnerability
CVE-2010-1325
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-09-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Enterprise (SLE) 11 allows remote attackers to hijack the authentication of unspecified victims via vectors related to improper parameter quoting. NOTE: some sources report that this is a vulnerability in a product named "Apache SLMS," but that is incorrect.
Affected configurations
• novell suse lifecycle management server 1.0
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html lists.opensuse.org
- http://support.novell.com/security/cve/CVE-2010-1325.html support.novell.com
- http://www.securityfocus.com/bid/42121 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=588284 bugzilla.novell.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61006 exchange.xforce.ibmcloud.com
- http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html lists.opensuse.org
- http://support.novell.com/security/cve/CVE-2010-1325.html support.novell.com
- http://www.securityfocus.com/bid/42121 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=588284 bugzilla.novell.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61006 exchange.xforce.ibmcloud.com