Cross-Site Request Forgery in IBM Interact by IBM
CVE-2016-5889

8.8HIGH

Key Information:

Vendor
IBM
Status
Interact
Vendor
CVE Published:
10 May 2017

Summary

IBM Interact versions 8.6, 9.0, 9.1, and 10.0 are susceptible to a cross-site request forgery vulnerability that enables attackers to perform unauthorized actions on behalf of a trusted user. This flaw arises when user requests are not properly authenticated, leading to potential exploitation by malicious actors. It is crucial for users to be aware of this vulnerability and implement protective measures to safeguard their applications.

Affected Version(s)

Interact 10.0, 8.6, 9.0, 9.1, 9.1.1, 9.1.2

References

http://www.ibm.com/support/docview.wss?uid=swg22002149
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.