7 matches found
Security Bulletin: Multiple vulnerabilities in IBM InfoSphere Optim Workload Replay (CVE-2015-1894, CVE-2015-1895)
Summary Multiple vulnerabilities have been identified in IBM® InfoSphere® Optim™ Workload Replay, allowing an attacker to obtain information or gain access to data and operations that are restricted to authorized users. Vulnerability Details CVEID: CVE-2015-1894 DESCRIPTION: IBM Optim Workload...
PT-2015-5493
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Workload Replay versions 2.x before 2.1.0.3 Description The issue allows remote attackers to bypass intended access restrictions by modifying client behavior, as the software relies on client-side code to verify...
PT-2015-5492
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Workload Replay versions prior to 2.1.0.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Recommendations For...
CVE-2015-1895: Undefined Security Weakness
IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the client behavior...
CVE-2015-1894: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2014-0827: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
PT-2014-3871
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Workload Replay version 1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This could potentially lead to unauthorized actions on the affected...