CSRF in IBM Websphere Portal
CVE-2014-6214
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.010 (57.9th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_portal — versions 8.0.0.0, 8.0.0.1, 8.5.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)
- psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)