Cross-Site Request Forgery Vulnerability in IBM Engineering Requirements Quality Assistant

CVE-2021-38868

What is CVE-2021-38868?

IBM Engineering Requirements Quality Assistant On-Premises is susceptible to cross-site request forgery, a vulnerability that could allow attackers to perform unauthorized actions by exploiting the trust a website places in authenticated users. This could lead to significant security risks, as malicious operations may be executed without the knowledge of users engaged with the platform. It is crucial for organizations using this software to review their configurations and apply recommended security patches to mitigate this risk.

References