CSRF in IBM Optim Workload Replay
CVE-2015-1894
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.007 (49.8th percentile) — read the EPSS interpretation.
Affected products
- Ibm Optim_workload_replay — versions 2.1, 2.1.0.1, 2.1.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)