CSRF Vulnerability in IBM WebSphere DataPower XC10 Appliance
CVE-2014-3058

Currently unrated

Key Information:

Vendor: IBM
Status: Websphere Datapower Xc10 Appliance Firmware
Vendor: CVE Published:; 11 December 2014

What is CVE-2014-3058?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the IBM WebSphere DataPower XC10 appliance, enabling remote authenticated users to hijack the authentication mechanism of other users. This arises when requests are made to inject malicious XSS sequences, compromising the security integrity of user sessions. Affected versions include the IBM WebSphere DataPower XC10 appliance versions 2.1 and 2.5 before FP4, highlighting the importance of applying patches and adhering to secure development practices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch