CVE-2012-2959

CVE-2012-2959 is a CSRF vulnerability affecting BMC Identity Management Suite v7.5.00.103 (and potentially other versions) in the password-manager/changePasswords.do endpoint. An unauthenticated attacker could trick a logged-in administrator into submitting a request that changes user passwords, ...