Cross-Site Request Forgery Vulnerability in IBM Engineering Requirements Quality Assistant
CVE-2021-38868

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Engineering Requirements Quality Assistant On-premises
Vendor
CVE Published:
18 July 2022

What is CVE-2021-38868?

IBM Engineering Requirements Quality Assistant On-Premises is susceptible to cross-site request forgery, a vulnerability that could allow attackers to perform unauthorized actions by exploiting the trust a website places in authenticated users. This could lead to significant security risks, as malicious operations may be executed without the knowledge of users engaged with the platform. It is crucial for organizations using this software to review their configurations and apply recommended security patches to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Engineering Requirements Quality Assistant On-Premises All

References

https://www.ibm.com/support/pages/node/6604005
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/208310
vdb-entryx_refsource_XF

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.