CVE-2013-0452 — Cross-Site Request Forgery in IBM Software USE Analysis

CWE-352 — Cross-Site Request Forgery3 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
0.1%
top 69.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Software USE AnalysisIBM Tivoli Endpoint Manager
Timeline
PublishedMar 29
Latest updateMay 5

Description

Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format (AMF) messages.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-5jr8-8r92-6cw6: Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1↗2022-05-05
▶
CVEList
CVE-2013-0452: Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1↗2013-03-29
▶
CVE-2013-0452 — Cross-Site Request Forgery in IBM | cvebase