Cross-Site Request Forgery in IBM StoredIQ by IBM
CVE-2019-4167

4.3MEDIUM

Key Information:

Vendor
IBM
Status
Storediq
Vendor
CVE Published:
20 August 2019

Summary

IBM StoredIQ 7.6.0 exhibits a vulnerability that allows an attacker to perform unauthorized actions by exploiting cross-site request forgery. This issue arises when a trusted user is tricked into executing unwanted actions on the web application due to improper validation of requests. Malicious entities could leverage this flaw to manipulate the system and gain unauthorized access to sensitive functions, highlighting the need for improved security measures.

Affected Version(s)

StoredIQ 7.6.0

References

http://www.ibm.com/support/docview.wss?uid=ibm10967327
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/158700
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.