| Vulnerability Name: | CVE-2013-4056 (CCN-86545) | ||||||||
| Assigned: | 2013-10-10 | ||||||||
| Published: | 2013-10-10 | ||||||||
| Updated: | 2017-08-29 | ||||||||
| Summary: | Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P) 5.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:H/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-352 | ||||||||
| Vulnerability Consequences: | Cross-Site Scripting | ||||||||
| References: | Source: MITRE Type: CNA CVE-2013-4056 Source: CCN Type: SA55300 IBM InfoSphere Information Server / Information Analyzer Cross-Site Request Forgery Vulnerability Source: CCN Type: IBM Security Bulletin 1652413 IBM InfoSphere Information Server Data Quality Console and Information Analyzer are vulnerable to cross-site request forgery attacks (CVE-2013-4056) Source: CONFIRM Type: Vendor Advisory http://www-01.ibm.com/support/docview.wss?uid=swg21652413 Source: CCN Type: OSVDB ID: 98346 IBM InfoSphere Multiple Product Unspecified CSRF Source: CCN Type: BID-62976 IBM InfoSphere Data Quality Console/Information Analyzer Cross Site Request Forgery Vulnerability Source: XF Type: UNKNOWN ibm-infosphere-cve20134056-csrf(86545) Source: XF Type: UNKNOWN ibm-infosphere-cve20134056-csrf(86545) | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||