CVE-2013-1088

Currently unrated

Key Information:

Vendor
Novell
Status
Imanager
Vendor
CVE Published:
24 April 2013

Summary

Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container.

References

http://www.novell.com/support/kb/doc.php?id=7010166
x_refsource_CONFIRM
https://bugzilla.novell.com/show_bug.cgi?id=726260
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.