Cross-Site Request Forgery in IBM Interact by IBM
CVE-2016-5889
8.8HIGH
Summary
IBM Interact versions 8.6, 9.0, 9.1, and 10.0 are susceptible to a cross-site request forgery vulnerability that enables attackers to perform unauthorized actions on behalf of a trusted user. This flaw arises when user requests are not properly authenticated, leading to potential exploitation by malicious actors. It is crucial for users to be aware of this vulnerability and implement protective measures to safeguard their applications.
Affected Version(s)
Interact 10.0, 8.6, 9.0, 9.1, 9.1.1, 9.1.2
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved