CVE-2012-2959
Cross-site request forgery (CSRF) vulnerability in password-manager/changePasswords.do in BMC Identity Management Suite 7.5.00.103 allows remote attackers to hijack the authentication of administrators for requests that change passwords.
CVSS 2.0 · 5.1 Medium
EPSS 1.1%
KEV · Not listed
Vendors
Products