CSRF in IBM Infosphere Information Server
CVE-2013-4056
Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (43.8th percentile) — read the EPSS interpretation.
Affected products
- Ibm Infosphere_information_server — versions 8.7, 8.7.0.1, 8.7.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)