Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2013-1088

Publication date 24 April 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container.

Read the notes from the security team

Status

Package Ubuntu Release Status
tomcat6 13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Not affected
10.04 LTS lucid
Not affected
8.04 LTS hardy Not in release
tomcat7 13.04 raring
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
11.10 oneiric
Not affected
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release

Notes

jdstrand

not clear from Novell advisory if this is tomcat itself or their use of tomcat. Novell bug is private. As of 2013-04-24, no upstream commits to trunk for this issue

mdeslaur

No indication that this is an issue in tomcat. Marking as not-affected.