Security Bulletin: IBM TRIRIGA Application Unintended Proxy or Intermediary (CVE-2016-0362)

Summary IBM TRIRIGA platform allows remote attackers to use one of its web services as a proxy to forward HTTP requests to other internal/external Web resources. Vulnerability Details CVEID: CVE-2016-0362 CVSS Base Score: 4.3 CVSS Temporal Score: See for the current score CVSS Environmental Score...

CVE-2016-0362

Vulnerability (CVE-2016-0362) affects IBM TRIRIGA Application Platform versions 3.3.x before 3.3.2.6, 3.4.x before 3.4.2.4, and 3.5.x before 3.5.0.2. The issue is a server-side request forgery (SSRF) via a crafted proxy request to a web service, allowing remote authenticated users to trigger netw...