Cross site request forgery (csrf)

2013-03-2916:09:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.2%

JSON

Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service via malformed HTTP data.

CPENameOperatorVersion
rational_policy_testereq8.0.0.0
rational_policy_testereq8.5.0.3
rational_policy_testereq5.6.0.0
rational_policy_testereq8.0.1.0
rational_policy_testereq8.0.0.2
rational_policy_testereq8.5.0.1
rational_policy_testereq8.5.0.0
rational_policy_testereq8.0.1.1
rational_policy_testereq8.5.0.2
rational_policy_testereq8.0.0.1

Name	Operator	Version
rational_policy_tester	eq	8.0.0.0
rational_policy_tester	eq	8.5.0.3
rational_policy_tester	eq	5.6.0.0
rational_policy_tester	eq	8.0.1.0
rational_policy_tester	eq	8.0.0.2
rational_policy_tester	eq	8.5.0.1
rational_policy_tester	eq	8.5.0.0
rational_policy_tester	eq	8.0.1.1
rational_policy_tester	eq	8.5.0.2
rational_policy_tester	eq	8.0.0.1