Open redirect

IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that...

CVE-2019-4166

IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that...

CVE-2019-4166

IBM StoredIQ 7.6 (versions 7.6.0.0 to 7.6.0.18) is affected by CVE-2019-4166, an open redirect/phishing vulnerability. A remote attacker could lure a victim to a crafted site to spoof the URL and redirect to a malicious site, potentially harvesting sensitive data or enabling further attacks. The ...

PT-2019-16944 · Ibm · Ibm Storediq

Name of the Vulnerable Software and Affected Versions: IBM StoredIQ version 7.6 Description: The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, the attacker could exploit this to spoof the URL...

Security Bulletin: IBM StoredIQ is affected by potential Host Header Injection (CVE-2019-4166)

Summary IBM StoredIQ is affected by potential Host Header Injection on StoredIQ Dataserver Vulnerability Details CVEID: CVE-2019-4166 DESCRIPTION: IBM StoredIQ could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a...

IBM StoredIQ Detection

Detection of IBM StoredIQ. The script sends a connection request to the server and attempts to detect IBM StoredIQ and to extract its version. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

IBM StoredIQ Cross-Site Request Forgery Vulnerability

IBM StoredIQ is a suite of data visualization and processing platforms from IBM, USA. The platform provides scalable analytics and governance of unstructured data, as well as records management, storage optimization and migration of data. A cross-site request forgery vulnerability exists in IBM...

IBM StoredIQ elevation of privilege vulnerability (CNVD-2018-26905)

IBM StoredIQ is a suite of data visualization and processing platforms from IBM, USA. The platform provides scalable analytics and governance of unstructured data, as well as records management, storage optimization and migration of data. A security vulnerability exists in IBM StoredIQ. An attack...

Authorization

IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high privileged users and also perform some state changing actions restricted to a high privileged user. IBM X-Force ID: 153119...

CVE-2018-1928

IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high privileged users and also perform some state changing actions restricted to a high privileged user. IBM X-Force ID: 153119...

CVE-2018-1927

IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 153118...

Cross site request forgery (csrf)

IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 153118...

CVE-2018-1928

IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high privileged users and also perform some state changing actions restricted to a high privileged user. IBM X-Force ID: 153119...

CVE-2018-1927

IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 153118...

CVE-2018-1928

IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privileged user to access the application endpoints of high privileged users and also perform some state changing actions restricted to a high privileged user. IBM X-Force ID: 153119...

CVE-2018-1927

IBM StoredIQ 7.6 is vulnerable to cross-site request forgery (CSRF). Affected versions are 7.6.0.0 to 7.6.0.17. Root cause is CSRF enabling unauthorized actions via trusted user requests. Remediation: upgrade to 7.6.0.17 and apply the interim fix 7.6.0.17-IBMStoredIQ-LinuxX86_64-if001 from Fix Ce...

CVE-2018-1927

IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 153118...

CVE-2018-1928

CVE-2018-1928 affects IBM StoredIQ 7.6.0. The issue is improper authorization of user roles, allowing a low-privileged user to access endpoints and perform state-changing actions intended for high-privileged users. The vulnerability’s impact is described in IBM and CVE records, with CVSS v3.0 vec...

Security Bulletin: IBM StoredIQ is affected by a cross-site request forgery

Summary IBM StoredIQ is affected by a cross-site request forgery. Vulnerability Details CVEID: CVE-2018-1927 DESCRIPTION: IBM StoredIQ is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website...

Security Bulletin: IBM StoredIQ Privilege Insufficient Authorization

Summary IBM StoredIQ has addressed the vulnerability of not implementing proper authorization of user roles. Vulnerability Details CVEID: CVE-2018-1928 DESCRIPTION: IBM StoredIQ does not implement proper authorization of user roles due to which it was possible for a low privileged user to access...