Cross site request forgery (csrf)

2014-02-0115:55:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.8%

JSON

Cross-site request forgery (CSRF) vulnerability in the OAC component in IBM Financial Transaction Manager (FTM) 2.0 before 2.0.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that modify configuration data.

CPENameOperatorVersion
financial_transaction_managereq2.0.0.2
financial_transaction_managereq2.0.0.0
financial_transaction_managereq2.0.0.1

Name	Operator	Version
financial_transaction_manager	eq	2.0.0.2
financial_transaction_manager	eq	2.0.0.0
financial_transaction_manager	eq	2.0.0.1

References

osvdb.org/102766

www-01.ibm.com/support/docview.wss?uid=swg21662714

exchange.xforce.ibmcloud.com/vulnerabilities/90585