Cross site request forgery (csrf)

2012-06-1123:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.0%

JSON

Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to hijack the authentication of administrators for requests that change passwords.

CPENameOperatorVersion
identity_management_suiteeq7.5.00.103

CPE	Name	Operator	Version
	identity_management_suite	eq	7.5.00.103

References

www.kb.cert.org/vuls/id/221180