medium5.1Public exploit code
CVE-2012-2959
Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to h…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BMC Identity Management - Cross-Site Request Forgery2012-06-11 · webapps · java · Verified
Impact
Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to hijack the authentication of administrators for requests that change passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bmc | Identity Management Suite | Version 7.5.00.103 |