CSRF in IBM Leads

CVE-2015-0115

Cross-site request forgery (CSRF) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to hijack the authentication of customer accounts.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.005 (39.3th percentile) — read the EPSS interpretation.

Affected products

  • Ibm Leads — versions 7.1.0, 7.1.1, 7.5.0
  • N/a — versions n/a

Weakness classification (CWE)

References