Description
Cross-site request forgery (CSRF) vulnerability in VMware vShield Manager (vSM) 1.0.1 before Update 2 and 4.1.0 before Update 2 allows remote attackers to hijack the authentication of arbitrary users.
References
- 52525 vdb-entry
- vshield-manager-csrf(74092) vdb-entry
- 1026815 vdb-entry
- 80121 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2012-0005.html
- 48409 third-party-advisory