CVEvulnerability
CVE-2013-0452
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format (AMF) messages.
Affected configurations
• ibm software use analysis (<= 1.3.2)
• ibm tivoli endpoint manager 8.2
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV38145 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21631350 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80968 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV38145 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21631350 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80968 exchange.xforce.ibmcloud.com