PT-2015-3840
CVE-2014-6214
·
تاريخ النشر
2015-03-13
·
تاريخ التحديث
2015-08-11
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
IBM WebSphere Portal versions 8.0.0 through 8.0.0.1 CF15
IBM WebSphere Portal versions 8.5.0 before CF05
Description
A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Recommendations
For IBM WebSphere Portal versions 8.0.0 through 8.0.0.1 CF15, update to a version after CF15 to resolve the issue.
For IBM WebSphere Portal versions 8.5.0 before CF05, apply CF05 or a later cumulative fix to address the problem.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾