6.8
CVSSv2

CVE-2011-1397

Published: 13/03/2012 Updated: 10/01/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allows remote malicious users to hijack the authentication of arbitrary users.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.
Vulnerable Product Search on Vulmon Subscribe to Product

ibm maximo asset management 6.2

ibm maximo asset management 7.1

ibm maximo asset management 7.5

ibm maximo asset management essentials 6.2

ibm maximo asset management essentials 7.1

ibm maximo asset management essentials 7.5

ibm tivoli asset management for it 6.2

ibm tivoli asset management for it 7.1

ibm tivoli asset management for it 7.2

ibm trivoli service request manager 7.1

ibm trivoli service request manager 7.2

ibm maximo service desk 6.2

ibm tivoli change and configuration management database 6.2

ibm tivoli change and configuration management database 7.1

ibm tivoli change and configuration management database 7.2