Cross-Site Request Forgery Vulnerability in IBM Jazz for Service Management
CVE-2017-1631
8.8HIGH
Summary
The IBM Jazz for Service Management product, specifically version 1.1.3 of IBM Tivoli Components, is susceptible to a cross-site request forgery vulnerability. This issue allows attackers to perform unauthorized actions by transmitting malicious requests through a trusted user's session, compromising the integrity of user interactions on the platform. Organizations utilizing this product should ensure that security measures are implemented to mitigate the potential risks associated with this vulnerability.
Affected Version(s)
Tivoli Components 1.1.3
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved