Security Bulletin: Multiple vulnerabilities exist in IBM InfoSphere BigInsights (CVE-2013-3996, CVE-2013-3995, CVE-2013-3992)

Abstract Vulnerabilities have been identified in IBM InfoSphere BigInsights which make the product vulnerable to attacks using cross-site scripting, phishing through frames and cross-site request forgery. Content VULNERABILITY DETAILS CVE ID: CVE-2013-3996 Description: An attacker can initiate a...

CVE-2013-3992

CVE-2013-3992 is an CSRF vulnerability in IBM InfoSphere BigInsights 2.0–2.1. The IBM advisory lists affected platforms as BigInsights v1.1–2.1 (Linux shown) and provides remediation via the 2.1 Fix Pack (2.1.0.1). Other fixes include contacting support for older versions (1.1–2.0). The vulnerabi...