Cross-Site Request Forgery in IBM StoredIQ
CVE-2018-1927
6.5MEDIUM
Summary
IBM StoredIQ 7.6 is susceptible to cross-site request forgery, allowing attackers to execute unwanted actions on behalf of authenticated users. This vulnerability occurs when the application fails to properly verify requests, potentially leading to unauthorized operations being carried out within trusted sessions. Attackers can exploit this flaw by tricking users into clicking malicious links or visiting compromised sites, which can result in significant security breaches and data exposure.
Affected Version(s)
StoredIQ 7.6
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved