Cross-Site Request Forgery Vulnerability in IBM Jazz for Service Management
CVE-2016-9975

8.8HIGH

Key Information:

Vendor
IBM
Vendor
CVE Published:
24 February 2017

Summary

IBM Jazz for Service Management versions 1.1.2.1 and 1.1.3 are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This issue can enable an attacker to perform unauthorized actions by sending crafted requests from a trusted user, potentially compromising the integrity and operation of the application. It is crucial for users of affected versions to implement appropriate security measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

Jazz for Service Management 1.1.2.1

Jazz for Service Management 1.1.3

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.