Cross-Site Request Forgery in IBM StoredIQ
CVE-2018-1927

6.5MEDIUM

Key Information:

Vendor
IBM
Status
Storediq
Vendor
CVE Published:
30 November 2018

Summary

IBM StoredIQ 7.6 is susceptible to cross-site request forgery, allowing attackers to execute unwanted actions on behalf of authenticated users. This vulnerability occurs when the application fails to properly verify requests, potentially leading to unauthorized operations being carried out within trusted sessions. Attackers can exploit this flaw by tricking users into clicking malicious links or visiting compromised sites, which can result in significant security breaches and data exposure.

Affected Version(s)

StoredIQ 7.6

References

http://www.ibm.com/support/docview.wss?uid=ibm10741605
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/153118
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.