CVE-2010-1325

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.91%

Published

Sep 3, 2010

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site request forgery (CSRF) vulnerability in the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Enterprise (SLE) 11 allows remote attackers to hijack the authentication of unspecified victims via vectors related to improper parameter quoting. NOTE: some sources report that this is a vulnerability in a product named "Apache SLMS," but that is incorrect.

Weaknesses (CWE)

CWE-352

Affected Products (2)

novell · suse_lifecycle_management_servervulnerable

novell · suse_linux

References (10)

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html

http://support.novell.com/security/cve/CVE-2010-1325.html

http://www.securityfocus.com/bid/42121

https://bugzilla.novell.com/show_bug.cgi?id=588284

https://exchange.xforce.ibmcloud.com/vulnerabilities/61006

http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html