Cross site request forgery (csrf)

2014-02-0115:55:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.1%

JSON

The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.

CPENameOperatorVersion
spss_collaboration_and_deployment_serviceseq4.1.1.3
spss_collaboration_and_deployment_serviceseq4.2.1.3
spss_collaboration_and_deployment_serviceseq4.2.1
spss_collaboration_and_deployment_serviceseq4.1.1.1
spss_collaboration_and_deployment_serviceseq4.1.1.2
spss_collaboration_and_deployment_serviceseq4.2.1.1
spss_collaboration_and_deployment_serviceseq4.2.1.2
spss_collaboration_and_deployment_serviceseq5.0.0
spss_collaboration_and_deployment_serviceseq5.0.0.1
spss_collaboration_and_deployment_serviceseq5.0.1

Name	Operator	Version
spss_collaboration_and_deployment_services	eq	4.1.1.3
spss_collaboration_and_deployment_services	eq	4.2.1.3
spss_collaboration_and_deployment_services	eq	4.2.1
spss_collaboration_and_deployment_services	eq	4.1.1.1
spss_collaboration_and_deployment_services	eq	4.1.1.2
spss_collaboration_and_deployment_services	eq	4.2.1.1
spss_collaboration_and_deployment_services	eq	4.2.1.2
spss_collaboration_and_deployment_services	eq	5.0.0
spss_collaboration_and_deployment_services	eq	5.0.0.1
spss_collaboration_and_deployment_services	eq	5.0.1