Cross site request forgery (csrf)

2022-08-2618:15:00

PRIOn knowledge base

www.prio-n.com

ibm

datapower gateway

vulnerability

cross-site request forgery

x-force id

nvd

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.7%

JSON

IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 228357.

CPENameOperatorVersion
datapower_gatewayge2018.4.1.0
datapower_gatewayle2018.4.1.21
datapower_gatewayge10.0.1.0
datapower_gatewaylt10.5.0
datapower_gatewayge10.0.2.0
datapower_gatewaylt10.5.0

Name	Operator	Version
datapower_gateway	ge	2018.4.1.0
datapower_gateway	le	2018.4.1.21
datapower_gateway	ge	10.0.1.0
datapower_gateway	lt	10.5.0
datapower_gateway	ge	10.0.2.0
datapower_gateway	lt	10.5.0