CVE-2019-6508

CVE-2019-6508 affects creditease-sec insight (through 2018-09-11). The issue is in role_perm_delete in srcpm/app/admin/views.py and is a CSRF vulnerability. The NVD entry lists this as a CSRF weakness with CVSS metrics: CVSS v2 base score 6.8 (Partial confidentiality, integrity, availability) and...

CVE-2019-6509

CVE-2019-6509 affects creditease-sec insight (through 2018-09-11). The vulnerability lies in depart_delete within srcpm/app/admin/views.py, which allows Cross-Site Request Forgery (CSRF). The available sources confirm the CSRF weakness but do not specify affected versions, exact exploit condition...

CVE-2019-6510

The CVE-2019-6510 entry describes a CSRF weakness in creditease-sec insight up to 2018-09-11, specifically in the user_delete function of srcpm/app/admin/views.py. The issue arises from lack of sufficient CSRF protection, enabling potential unauthorized state-changing requests. CVSS data from NVD...

CVE-2019-6507

CVE-2019-6507: A CSRF flaw was reported in creditease-sec insight through 2018-09-11, specifically in login_user_delete within srcpm/app/admin/views.py. The NVD entry attributes a CVSS‑3.0 base score of 8.8 (HIGH impact) with network attack, low complexity, no privileges required, and user intera...

CVE-2019-6507: Cross-Site Request Forgery (CSRF)

An issue was discovered in creditease-sec insight through 2018-09-11. loginuserdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6510: Cross-Site Request Forgery (CSRF)

An issue was discovered in creditease-sec insight through 2018-09-11. userdelete in srcpm/app/admin/views.py allows CSRF...

PT-2019-18127

Name of the Vulnerable Software and Affected Versions creditease-sec insight through 2018-09-11 Description An issue was discovered that allows CSRF in the role perm delete function located in srcpm/app/admin/views.py. Recommendations For creditease-sec insight through 2018-09-11, consider...

PT-2019-18126

Name of the Vulnerable Software and Affected Versions creditease-sec insight through 2018-09-11 Description An issue was discovered that allows CSRF in the login user delete function located in srcpm/app/admin/views.py. Recommendations For creditease-sec insight through 2018-09-11, consider...

PT-2019-18129

Name of the Vulnerable Software and Affected Versions creditease-sec insight through 2018-09-11 Description An issue was discovered that allows CSRF in the user delete function, located in srcpm/app/admin/views.py. Recommendations For creditease-sec insight through 2018-09-11, consider implementi...

PT-2019-18128

Name of the Vulnerable Software and Affected Versions creditease-sec insight versions through 2018-09-11 Description An issue was discovered that allows CSRF, specifically in the depart delete function within the srcpm/app/admin/views.py file. Recommendations For creditease-sec insight versions...

CVE-2019-6508: Cross-Site Request Forgery (CSRF)

An issue was discovered in creditease-sec insight through 2018-09-11. rolepermdelete in srcpm/app/admin/views.py allows CSRF...

CVE-2019-6509: Cross-Site Request Forgery (CSRF)

An issue was discovered in creditease-sec insight through 2018-09-11. departdelete in srcpm/app/admin/views.py allows CSRF...

Certificate Based Authentication on Gateway Insight

With Client Authentication enabled on an SSL virtual server, the NetScaler appliance asks for the Client Certificate during the SSL handshake. The appliance checks the certificate presented by the client for normal constraints, such as the issuer signature and expiration date. Here are some use...

IBM i2 Enterprise Insight Analysis Information Disclosure Vulnerability (CNVD-2018-26230)

IBM i2 Enterprise Insight Analysis is a suite of data analytics and integration solutions from IBM USA. The product is characterized by interoperability and scalability. An information disclosure vulnerability exists in IBM i2 Enterprise Insight Analysis version 2.1.7, which originates when a...

IBM i2 Enterprise Insight Analysis Clickjacking Vulnerability

IBM i2 Enterprise Insight Analysis is a suite of data analytics and integration solutions from IBM USA. The product is characterized by interoperability and scalability. A clickjacking vulnerability exists in IBM i2 Enterprise Insight Analysis version 2.1.7, which can be exploited by remote...

Information disclosure

IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM...

CVE-2018-1525

IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM...

CVE-2018-1505

IBM i2 Enterprise Insight Analysis 2.1.7 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 141413...

CVE-2018-1525

IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM...

CVE-2018-1504

IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks...