CSRF in IBM Rational Policy Tester
CVE-2013-0532
Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that cause a denial of service via malformed HTTP data.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (46.7th percentile) — read the EPSS interpretation.
Affected products
- Ibm Rational_policy_tester — versions 5.6.0.0, 8.0.0.0, 8.0.0.1
- Ibm Security_appscan — versions 5.6.0.0, 8.0.0.0, 8.0.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)