{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2011-11-21T11:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.zenpriseportal.com/patches/ZP_SecPatch_618_9995.zip"}, {"name": "VU#584363", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/584363"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2011-4498", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site request forgery (CSRF) vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.zenpriseportal.com/patches/ZP_SecPatch_618_9995.zip", "refsource": "CONFIRM", "url": "http://www.zenpriseportal.com/patches/ZP_SecPatch_618_9995.zip"}, {"name": "VU#584363", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/584363"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T00:09:18.401Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.zenpriseportal.com/patches/ZP_SecPatch_618_9995.zip"}, {"name": "VU#584363", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/584363"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2011-4498", "datePublished": "2011-11-21T11:00:00Z", "dateReserved": "2011-11-21T00:00:00Z", "dateUpdated": "2024-09-17T04:15:11.585Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:zenprise:zenprise_device_manager:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "4069641D-E045-47A7-8E79-76348EB0D6E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:zenprise:zenprise_device_manager:6.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "52B2CEB2-F213-4AC1-8F0B-DEB220E6DA52", "vulnerable": true}, {"criteria": "cpe:2.3:a:zenprise:zenprise_device_manager:6.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "CC540549-862A-43B3-86FA-2EDF450CC034", "vulnerable": true}, {"criteria": "cpe:2.3:a:zenprise:zenprise_device_manager:6.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "5336DEB9-7141-47A1-8B1F-93DC9BDCC5E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:zenprise:zenprise_device_manager:6.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "2D3ACACB-93D6-487F-8F75-CAD2A96FA23C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Cross-site request forgery (CSRF) vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices."}, {"lang": "es", "value": "Vulnerabilidad de falsificaci\u00f3n de petici\u00f3n en sitios cruzados en la consola web en Zenprise Device Manager v6.x hasta v6.1.8, permite a atacantes remotos secuestrar la autenticaci\u00f3n de administradores para peticiones que limpien dispositivos m\u00f3viles"}], "id": "CVE-2011-4498", "lastModified": "2024-11-21T01:32:25.353", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2011-11-21T11:55:04.697", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/584363"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.zenpriseportal.com/patches/ZP_SecPatch_618_9995.zip"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/584363"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.zenpriseportal.com/patches/ZP_SecPatch_618_9995.zip"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}