Security Bulletin: Cross-Site Request Forgery (CSRF) vulnerability identified with Jazz for Service Management (JazzSM) v1.1.3 (CVE-2017-1746)

Summary IBM Jazz for Service Management is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Vulnerability Details CVEID: CVE-2017-1746 DESCRIPTION: IBM Jazz for Service Management ...

CVE-2017-1746

CVE-2017-1746 affects IBM Jazz for Service Management (JazzSM) version 1.1.3, vulnerable to Cross-Site Request Forgery (CSRF) that could enable malicious actions transmitted from a trusted user. Remediation is available: JazzSM 1.1.3 with Cumulative Patch Level 5 (1.1.3.0-TIV-JazzSM-DASH-Cumulati...