CSRF in IBM Data Studio
CVE-2013-2980
Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (43.8th percentile) — read the EPSS interpretation.
Affected products
- Ibm Data_studio — versions 3.1.0, 3.1.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)