IBM Interact CVE-2016-5889 Unspecified Cross Site Request Forgery Vulnerability

Bugtraq ID:	98413
Class:	Input Validation Error
CVE:	CVE-2016-5889
Remote:	Yes
Local:	No
Published:	May 03 2017 12:00AM
Updated:	May 23 2017 04:25PM
Credit:	The vendor reported this issue.
Vulnerable:	IBM Interact 9.1.2 IBM Interact 9.1.1 IBM Interact 9.1 IBM Interact 9.0 IBM Interact 8.6 IBM Interact 10.0
Not Vulnerable:

IBM Interact CVE-2016-5889 Unspecified Cross Site Request Forgery Vulnerability

IBM Interact is prone to an unspecified cross-site request-forgery vulnerability.

An attacker can exploit this issue to perform unauthorized actions in the context of a logged-in user of the affected application. This may aid in other attacks.

IBM Interact versions 8.6, 9.0, 9.1, 9.1.1, 9.1.2, and 10.0 are vulnerable.

IBM Interact CVE-2016-5889 Unspecified Cross Site Request Forgery Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.

IBM Interact CVE-2016-5889 Unspecified Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Interact CVE-2016-5889 Unspecified Cross Site Request Forgery Vulnerability

References:

• IBM Homepage (IBM)
  
• swg22002149: Cross-site Request Forgery vulnerabilities in IBM Interact (CVE-201 (IBM)