PT-2011-4962 · Citrix · Zenprise Device Manager

Published 2011-11-21 · Updated 2011-11-21 · CVE-2011-4498

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zenprise Device Manager versions 6.x through 6.1.8

Description A cross-site request forgery issue in the web console allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices.

Recommendations For versions 6.x through 6.1.8, update to a version that contains a fix for this issue to prevent remote attackers from hijacking administrator authentication.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2011-4498

Affected Products

Zenprise Device Manager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-4498 · Security Note
• http://kb.cert.org/vuls/id/584363 · Patch
• http://zenpriseportal.com/patches/ZP_SecPatch_618_9995.zip · Patch