Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format (AMF) messages.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Tivoli Endpoint Manager for Software Use Analysis 跨站请求伪造漏洞
Vulnerability Description
IBM Tivoli Endpoint Manager是美国IBM公司的一套终端控制软件。该软件可帮助用户查看和更新系统，向所有端点部署和管理补丁，并可通过持续管理修复问题。 IBM Tivoli Endpoint Manager 8.2版本中的Software Use Analysis (SUA)应用程序1.3.3之前版本中存在跨站请求伪造漏洞。通过包含特制的Flash Action Message Format (AMF)消息的网站，，远程攻击者利用该漏洞劫持任意用户的身份验证。
CVSS Information
N/A
Vulnerability Type
N/A