Cross site request forgery (csrf)

2014-12-2411:59:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.7%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

CPENameOperatorVersion
websphere_service_registry_and_repositoryeq7.5.0.1
websphere_service_registry_and_repositoryeq7.0.0.1
websphere_service_registry_and_repositoryeq7.5.0.2
websphere_service_registry_and_repositoryeq8.0
websphere_service_registry_and_repositoryeq6.3.0.4
websphere_service_registry_and_repositoryeq6.3.0.1
websphere_service_registry_and_repositoryeq7.5.0.0
websphere_service_registry_and_repositoryeq7.0.0.4
websphere_service_registry_and_repositoryeq7.0.0.3
websphere_service_registry_and_repositoryeq7.0.0

Name	Operator	Version
websphere_service_registry_and_repository	eq	7.5.0.1
websphere_service_registry_and_repository	eq	7.0.0.1
websphere_service_registry_and_repository	eq	7.5.0.2
websphere_service_registry_and_repository	eq	8.0
websphere_service_registry_and_repository	eq	6.3.0.4
websphere_service_registry_and_repository	eq	6.3.0.1
websphere_service_registry_and_repository	eq	7.5.0.0
websphere_service_registry_and_repository	eq	7.0.0.4
websphere_service_registry_and_repository	eq	7.0.0.3
websphere_service_registry_and_repository	eq	7.0.0