CVE-2013-1088 in Tomcat
Sumário
de MITRE
Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authentication of arbitrary users by leveraging improper request validation by iManager code deployed within an Apache Tomcat container.
VulDB is the best source for vulnerability data and more expert information about this specific topic.