Unscored severity · published Mar 29, 2013
CVE-2013-0452
Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format (AMF) messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
Software Use Analysis · Ibm
through 1.3.2 · source: NVD
TE
Tivoli Endpoint Manager · Ibm
8.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0452
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0452
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV38145
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21631350
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/80968