CSRF in IBM Security Network Protection Firmware
CVE-2014-6198
Cross-site request forgery (CSRF) vulnerability in IBM Security Network Protection 5.3 before 5.3.1 allows remote attackers to hijack the authentication of arbitrary users.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.008 (53.7th percentile) — read the EPSS interpretation.
Affected products
- Ibm Security_network_protection_firmware — versions 5.3
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)