Lucene search
IBM55AB9E3B5FA57EA8C393C1853AA1EA1FF566DD31A299DBE71489A83C39360055HistoryMar 30, 2020 - 6:13 a.m.
Security Bulletin: Cross-site request forgery vulnerability in IBM Tivoli Netcool Impact (CVE-2020-4238)
2020-03-3006:13:04
www.ibm.com
6
0.001 Low
EPSS
Percentile
30.2%
Summary
There is a cross-site request forgery vulnerability in IBM Tivoli Netcool Impact Service module.
Vulnerability Details
CVEID:CVE-2020-4238
**DESCRIPTION:**IBM Tivoli Netcool Impact is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS Base score: 4.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/175411 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Tivoli Netcool Impact 7.1.0 | 7.1.0.0~7.1.0.17 |
Remediation/Fixes
| VRMF| Remediation/First Fix
—|—|—
IBM Tivoli Netcool Impact 7.1.0| 7.1.0.18| IBM Tivoli Netcool Impact 7.1.0 FP18
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| tivoli netcool/impact | eq | 7.1.0 |
Related
cve
cve
CVE-2020-4238
2020-03-31 15:15:20
nvd
nvd
CVE-2020-4238
2020-03-31 15:15:20
cvelist
cvelist
CVE-2020-4238
2020-03-30 00:00:00
prion
prion
Cross site request forgery (csrf)
2020-03-31 15:15:00
0.001 Low
EPSS
Percentile
30.2%
Related for 55AB9E3B5FA57EA8C393C1853AA1EA1FF566DD31A299DBE71489A83C39360055