Cross site request forgery (csrf)

2017-06-0205:29:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.

CPENameOperatorVersion
iamle1.7.4

CPE	Name	Operator	Version
	iam	le	1.7.4

References

www.soffid.com/security-advisory1-update/