CVE-2015-0115
Cross-site request forgery (CSRF) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to hijack the authentication of customer accounts.
- Score
- CVSS 2.0 6.0 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2015-06-28
- Last modified
- 2024-08-06
- Weaknesses
- CWE-352
Affected products
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21902807
