Lucene search
IBM54B04F309E2AC1CDB6778C8D648A3E557C1CB649D67F62740A7DA02553FA7FB1HistoryMar 30, 2020 - 6:10 a.m.
Security Bulletin: Cross-site request forgery vulnerability in IBM Tivoli Netcool Impact (CVE-2020-4237)
2020-03-3006:10:22
www.ibm.com
5
0.001 Low
EPSS
Percentile
30.2%
Summary
There is a cross-site request forgery vulnerability in IBM Tivoli Netcool Impact.
Vulnerability Details
CVEID:CVE-2020-4237
**DESCRIPTION:**IBM Tivoli Netcool Impact is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS Base score: 4.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/175410 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Tivoli Netcool Impact 7.1.0 | 7.1.0.0~7.1.0.17 |
Remediation/Fixes
| VRMF| Remediation/First Fix
—|—|—
IBM Tivoli Netcool Impact 7.1.0| 7.1.0.18| IBM Tivoli Netcool Impact 7.1.0 FP18
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| tivoli netcool/impact | eq | 7.1.0 |
Related
nvd
nvd
CVE-2020-4237
2020-03-31 15:15:19
cvelist
cvelist
CVE-2020-4237
2020-03-30 00:00:00
prion
prion
Cross site request forgery (csrf)
2020-03-31 15:15:00
cve
cve
CVE-2020-4237
2020-03-31 15:15:19
0.001 Low
EPSS
Percentile
30.2%
Related for 54B04F309E2AC1CDB6778C8D648A3E557C1CB649D67F62740A7DA02553FA7FB1