Cross-Site Request Forgery Vulnerability in IBM Jazz for Service Management
CVE-2021-29816

4.3MEDIUM

Key Information:

Vendor
IBM
Status
Jazz For Service Management
Vendor
CVE Published:
23 September 2021

Summary

IBM Jazz for Service Management versions 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI are susceptible to a cross-site request forgery vulnerability. This security flaw may allow attackers to carry out unauthorized actions on behalf of a trusted user, leading to potential exploitation of sensitive data or user privileges. This vulnerability emphasizes the need for robust security measures in web applications to protect against CSRF attacks.

Affected Version(s)

Jazz for Service Management 1.1.3.10

References

https://www.ibm.com/support/pages/node/6491535
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/204341
vdb-entryx_refsource_XF

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.