Cross-Site Request Forgery in IBM StoredIQ by IBM
CVE-2019-4167
4.3MEDIUM
Summary
IBM StoredIQ 7.6.0 exhibits a vulnerability that allows an attacker to perform unauthorized actions by exploiting cross-site request forgery. This issue arises when a trusted user is tricked into executing unwanted actions on the web application due to improper validation of requests. Malicious entities could leverage this flaw to manipulate the system and gain unauthorized access to sensitive functions, highlighting the need for improved security measures.
Affected Version(s)
StoredIQ 7.6.0
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved