PT-2011-4962 · Citrix · Zenprise Device Manager

Publicado 2011-11-21 · Atualizado 2011-11-21 · CVE-2011-4498

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zenprise Device Manager versions 6.x through 6.1.8

Description A cross-site request forgery issue in the web console allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices.

Recommendations For versions 6.x through 6.1.8, update to a version that contains a fix for this issue to prevent remote attackers from hijacking administrator authentication.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2011-4498

Produtos afetados

Zenprise Device Manager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-4498 · Nota de Segurança
• http://kb.cert.org/vuls/id/584363 · Correção
• http://zenpriseportal.com/patches/ZP_SecPatch_618_9995.zip · Correção