IBM Emptoris Strategic Supply Management CVE-2017-1097 Cross Site Request Forgery Vulnerability

Bugtraq ID:	100622
Class:	Input Validation Error
CVE:	CVE-2017-1097
Remote:	Yes
Local:	No
Published:	Aug 10 2017 12:00AM
Updated:	Aug 10 2017 12:00AM
Credit:	IBM
Vulnerable:	IBM Emptoris Strategic Supply Management 10.1.1.0 IBM Emptoris Strategic Supply Management 10.1.0.0 IBM Emptoris Strategic Supply Management 10.0.4.0 IBM Emptoris Strategic Supply Management 10.0.2.0 IBM Emptoris Strategic Supply Management 10.0.1.0 IBM Emptoris Strategic Supply Management 10.0.0.0
Not Vulnerable:	IBM Emptoris Strategic Supply Management 10.1.1.8 IBM Emptoris Strategic Supply Management 10.1.0.10 IBM Emptoris Strategic Supply Management 10.0.4.0_iFix12 IBM Emptoris Strategic Supply Management 10.0.2.15 IBM Emptoris Strategic Supply Management 10.0.1.4 iFix7 IBM Emptoris Strategic Supply Management 10.0.0.3 iFix10

IBM Emptoris Strategic Supply Management CVE-2017-1097 Cross Site Request Forgery Vulnerability

IBM Emptoris Strategic Supply Management is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.

IBM Emptoris Strategic Supply Management CVE-2017-1097 Cross Site Request Forgery Vulnerability

An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.

IBM Emptoris Strategic Supply Management CVE-2017-1097 Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Emptoris Strategic Supply Management CVE-2017-1097 Cross Site Request Forgery Vulnerability

References:

• IBM Homepage (IBM)
  
• swg22006963: IBM Emptoris Strategic Supply Management is affected by a Cross-Sit (IBM)