Cross-Site Request Forgery Vulnerability in IBM License Metric Tool and Endpoint Manager
CVE-2014-4774

Currently unrated

Key Information:

Vendor
IBM
Status
Endpoint Manager Family
License Metric Tool
Vendor
CVE Published:
25 May 2015

Summary

A Cross-site request forgery vulnerability exists in the login interface of IBM License Metric Tool and Endpoint Manager for Software Use Analysis, prior to version 9.1.0.2. This flaw enables remote attackers to exploit the authentication process, potentially allowing unauthorized access by leveraging the FRAME element in the request. Users need to be aware of this security issue to safeguard their accounts and systems from potential attacks.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21701389
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.