PT-2022-20919 · Ibm · Ibm Datapower Gateway
CVSS v3.1
8.8
عالية
| المتجه | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM DataPower Gateway versions 10.0.1, 2018.4.1, and V10CD
Description
The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to a cross-site request forgery vulnerability.
Recommendations
For IBM DataPower Gateway version 10.0.1, update to a version that includes a fix for this issue.
For IBM DataPower Gateway version 2018.4.1, update to a version that includes a fix for this issue.
For IBM DataPower Gateway version V10CD, update to a version that includes a fix for this issue.
إصلاح
CSRF
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Ibm Datapower Gateway