Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2013-0452

Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format (AMF) messages.

  • Published: Mar 29, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-0452
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
ibm / tivoli_endpoint_manager 8.2 8.2.x
ibm / software_use_analysis - 1.3.2.x