CVE-2016-0362

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and trigger network traffic to arbitrary intranet or Internet hosts, via a crafted proxy request to a web service.

Score

CVSS 3.0 7.7 High

Status

Modified - psirt@us.ibm.com

Published

2016-07-01

Last modified

2024-08-05

Affected products

• Tririga Application Platform (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21980749