Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
secunia.com/advisories/41722
www-01.ibm.com/support/docview.wss?uid=swg1PM18909
www-01.ibm.com/support/docview.wss?uid=swg1PM23874
www-01.ibm.com/support/docview.wss?uid=swg27004980
www-01.ibm.com/support/docview.wss?uid=swg27014463
www.securityfocus.com/bid/43875
www.vupen.com/english/advisories/2010/2595
exchange.xforce.ibmcloud.com/vulnerabilities/62949