CVE-2013-0452

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-03-29 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8.2 allows remote attackers to hijack the authentication of arbitrary users via a web site that contains crafted Flash Action Message Format (AMF) messages.

Affected products

IBM Software Use Analysis: through 1.3.2
IBM Tivoli Endpoint Manager: 8.2

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV38145
http://www-01.ibm.com/support/docview.wss?uid=swg21631350
https://exchange.xforce.ibmcloud.com/vulnerabilities/80968
http://www-01.ibm.com/support/docview.wss?uid=swg1IV38145
http://www-01.ibm.com/support/docview.wss?uid=swg21631350
https://exchange.xforce.ibmcloud.com/vulnerabilities/80968

Get alerted when CVE-2013-0452 or the next vulnerability affects your stack