IBM Cúram Social Program Management Cross Site Request Forgery Vulnerability
BID:61378
Info
IBM Cúram Social Program Management Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 61378 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 22 2013 12:00AM |
| Updated: | Jul 22 2013 12:00AM |
| Credit: | IBM |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
IBM Cúram Social Program Management Cross Site Request Forgery Vulnerability
IBM Cúram Social Program Management is prone to a cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.
IBM Cúram Social Program Management versions prior to 6.0.4.4 are vulnerable.
IBM Cúram Social Program Management is prone to a cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.
IBM Cúram Social Program Management versions prior to 6.0.4.4 are vulnerable.
Exploit / POC
IBM Cúram Social Program Management Cross Site Request Forgery Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.
Solution / Fix
IBM Cúram Social Program Management Cross Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
IBM Cúram Social Program Management Cross Site Request Forgery Vulnerability
References:
References: