CSRF in IBM Websphere Application Server
CVE-2012-4853
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger information disclosure.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.010 (59.5th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_application_server — versions 6.1, 6.1.0, 6.1.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)