IBM InfoSphere Data Quality Console/Information Analyzer Cross Site Request Forgery Vulnerability

Bugtraq ID:	62976
Class:	Input Validation Error
CVE:	CVE-2013-4056
Remote:	Yes
Local:	No
Published:	Oct 10 2013 12:00AM
Updated:	Oct 10 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM InfoSphere Information Analyzer 9.1 IBM InfoSphere Information Analyzer 8.7 IBM InfoSphere Data Quality Console 9.1
Not Vulnerable:

IBM InfoSphere Data Quality Console/Information Analyzer Cross Site Request Forgery Vulnerability

IBM InfoSphere Data Quality Console and Information Analyzer are prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.

InfoSphere Data Quality Console 9.1 and InfoSphere Information Analyzer 8.7, and 9.1 are vulnerable.

IBM InfoSphere Data Quality Console/Information Analyzer Cross Site Request Forgery Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.

IBM InfoSphere Data Quality Console/Information Analyzer Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.