Multiple IBM Products CVE-2014-4774 Cross Site Request Forgery Vulnerability
BID:74822
Info
Multiple IBM Products CVE-2014-4774 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 74822 |
| Class: | Design Error |
| CVE: |
CVE-2014-4774 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 03 2015 12:00AM |
| Updated: | Apr 03 2015 12:00AM |
| Credit: | IBM |
| Vulnerable: |
IBM License Metric Tool 9.0.1 IBM License Metric Tool 9.1 IBM License Metric Tool 9 IBM Endpoint Management for Software Use Analysis 9.0 |
| Not Vulnerable: |
IBM License Metric Tool 9.1.0.2 IBM Endpoint Management for Software Use Analysis 9.1.0.2 |
Discussion
Multiple IBM Products CVE-2014-4774 Cross Site Request Forgery Vulnerability
Multiple IBM Products are prone to a cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
Multiple IBM Products are prone to a cross-site request-forgery vulnerability.
Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
Exploit / POC
Multiple IBM Products CVE-2014-4774 Cross Site Request Forgery Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.