Cross site request forgery (csrf)

2018-12-2014:29:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.4%

JSON

IBM DataPower Gateways 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 144887.

CPENameOperatorVersion
datapower_gatewayge7.5.0.0
datapower_gatewayle7.5.0.17
datapower_gatewayge7.5.1.0
datapower_gatewayle7.5.1.16
datapower_gatewayge7.5.2.0
datapower_gatewayle7.5.2.16
datapower_gatewayge7.6.0.0
datapower_gatewayle7.6.0.9

Name	Operator	Version
datapower_gateway	ge	7.5.0.0
datapower_gateway	le	7.5.0.17
datapower_gateway	ge	7.5.1.0
datapower_gateway	le	7.5.1.16
datapower_gateway	ge	7.5.2.0
datapower_gateway	le	7.5.2.16
datapower_gateway	ge	7.6.0.0
datapower_gateway	le	7.6.0.9