Cross-Site Request Forgery Vulnerability in IBM MQ Appliance
CVE-2020-4938

4.3MEDIUM

Key Information:

Vendor
IBM
Status
MQ Appliance
Vendor
CVE Published:
12 July 2021

Summary

IBM MQ Appliance versions 9.1 and 9.2 are susceptible to a cross-site request forgery (CSRF) vulnerability. This flaw can allow attackers to execute unauthorized actions on behalf of authenticated users, leveraging the trust established between a user and the web application. Such vulnerabilities can lead to significant security risks if not addressed, as they can compromise user data and application integrity. Comprehensive security measures should be implemented to mitigate the potential impact of this vulnerability.

Affected Version(s)

MQ Appliance 9.1

MQ Appliance 9.2

References

https://www.ibm.com/support/pages/node/6466717
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/191815
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.