IBM InfoSphere Optim Data Growth CVE-2013-0580 Cross Site Request Forgery Vulnerability

Bugtraq ID:	62861
Class:	Input Validation Error
CVE:	CVE-2013-0580
Remote:	Yes
Local:	No
Published:	Oct 04 2013 12:00AM
Updated:	Oct 04 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 9.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 8.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 7.1.2 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 7.1.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 7.1.0 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 6.1 IBM InfoSphere Optim Data Growth Solution for Oracle E-Business Suit 6.0
Not Vulnerable:

IBM InfoSphere Optim Data Growth CVE-2013-0580 Cross Site Request Forgery Vulnerability

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of an authorized user and gain access to the affected application. Other attacks are also possible.

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.0 through 9.1 are vulnerable.

IBM InfoSphere Optim Data Growth CVE-2013-0580 Cross Site Request Forgery Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.

IBM InfoSphere Optim Data Growth CVE-2013-0580 Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM InfoSphere Optim Data Growth CVE-2013-0580 Cross Site Request Forgery Vulnerability

References:

• IBM Homepage (IBM)
  
• InfoSphere Optim Data Growth solution for Oracle E-Business Suite Homepage (IBM)
  
• Security Bulletin: Multiple vulnerabilities in IBM Infosphere Optim Data Growth (IBM)