CVE-2016-0348

8HIGH

Key Information:

Vendor
IBM
Status
Tririga Application Platform
Vendor
CVE Published:
21 February 2018

Summary

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21980237
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/111813
vdb-entryx_refsource_XF

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.