CVE-2011-4498

Zenprise Device Manager 6.x-6.1.8 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in the web console in Zenprise Device Manager 6.x through 6.1.8 allows remote attackers to hijack the authentication of administrators for requests that wipe mobile devices.

References (2)

Core 2
Core References
Patch, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/584363

Scores

EPSS 0.0056
EPSS Percentile 42.8%

Details

CWE
CWE-352
Status published
Products (5)
zenprise/zenprise_device_manager 6.0
zenprise/zenprise_device_manager 6.1.0
zenprise/zenprise_device_manager 6.1.5
zenprise/zenprise_device_manager 6.1.6
zenprise/zenprise_device_manager 6.1.8
Published Nov 21, 2011
Tracked Since Feb 18, 2026