Lucene search

PRIOn knowledge basePRION:CVE-2012-4853

HistoryNov 14, 2012 - 12:30 p.m.

Cross site request forgery (csrf)

2012-11-1412:30:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.7%

JSON

Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger information disclosure.

CPENameOperatorVersion
websphere_application_servereq6.1.0.21
websphere_application_servereq6.1.0.31
websphere_application_servereq6.1.7
websphere_application_servereq6.1
websphere_application_servereq6.1.0.19
websphere_application_servereq6.1.6
websphere_application_servereq6.1.0.2
websphere_application_servereq6.1.0.33
websphere_application_servereq6.1.0.25
websphere_application_servereq6.1.14

Name	Operator	Version
websphere_application_server	eq	6.1.0.21
websphere_application_server	eq	6.1.0.31
websphere_application_server	eq	6.1.7
websphere_application_server	eq	6.1
websphere_application_server	eq	6.1.0.19
websphere_application_server	eq	6.1.6
websphere_application_server	eq	6.1.0.2
websphere_application_server	eq	6.1.0.33
websphere_application_server	eq	6.1.0.25
websphere_application_server	eq	6.1.14

Rows per page:

1-10 of 561

References

www-01.ibm.com/support/docview.wss?uid=swg1PM62920

www.ibm.com/support/docview.wss?uid=swg21614265

www.securityfocus.com/bid/56458

exchange.xforce.ibmcloud.com/vulnerabilities/79598

7.1 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

47.7%

JSON

Related for PRION:CVE-2012-4853