CVE-2013-1088

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-24 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container.

Affected products

Novell Imanager: through 2.7; 2.7, 2.7-refresh6, 2.7-sp4, 2.7-sp4_patch1, 2.7-sp4_patch2, 2.7-sp4_patch3 (+10)

References

http://www.novell.com/support/kb/doc.php?id=7010166
https://bugzilla.novell.com/show_bug.cgi?id=726260
http://www.novell.com/support/kb/doc.php?id=7010166
https://bugzilla.novell.com/show_bug.cgi?id=726260

Get alerted when CVE-2013-1088 or the next vulnerability affects your stack