Cross site request forgery (csrf)

2018-03-0919:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.6%

JSON

Cross-site request forgery (CSRF) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager (FTM) for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager (FTM) for Corporate Payment Services (CPS) for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors. IBM X-Force ID: 111052.

CPENameOperatorVersion
financial_transaction_managerge3.0.0.0
financial_transaction_managerle3.0.0.12
financial_transaction_managerge3.0.0.0
financial_transaction_managerle3.0.0.12
financial_transaction_managerge3.0.0.0
financial_transaction_managerle3.0.0.12
financial_transaction_managereq2.1.1.2
financial_transaction_managereq2.1.1.2
financial_transaction_managereq2.1.1.2

Name	Operator	Version
financial_transaction_manager	ge	3.0.0.0
financial_transaction_manager	le	3.0.0.12
financial_transaction_manager	ge	3.0.0.0
financial_transaction_manager	le	3.0.0.12
financial_transaction_manager	ge	3.0.0.0
financial_transaction_manager	le	3.0.0.12
financial_transaction_manager	eq	2.1.1.2
financial_transaction_manager	eq	2.1.1.2
financial_transaction_manager	eq	2.1.1.2