CVE-2013-4057
Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.
- Score
- CVSS 2.0 6.8 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2014-03-16
- Last modified
- 2024-08-06
- Weaknesses
- CWE-352
Affected products
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR48815
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR49200
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR49206
- http://www-01.ibm.com/support/docview.wss?uid=swg21666684
- http://www.securityfocus.com/bid/66154
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86546
