Cross site request forgery (csrf)

IBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154891...

CVE-2018-2001

CVE-2018-2001 affects IBM Cúram Social Program Management REST API across 6.1.0.0–6.2.0.x and 7.0.0.0–7.0.5.0, due to CSRF vulnerability in GET request handling (referrer validation). Exploitation could enable unauthorized actions trusted by a user. IBM bulletin recommends upgrading to 7.0.6.0 (a...