CVE-2012-2959

2012-06-1123:00:00

certcc

www.cve.org

cve-2012-2959

password manager

csrf vulnerability

bmc identity management suite

AI Score

7.1

Confidence

Low

EPSS

0.004

Percentile

72.6%

JSON

Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to hijack the authentication of administrators for requests that change passwords.

References

www.kb.cert.org/vuls/id/221180