PT-2013-4822 · Ibm · Ibm Infosphere Information Server

Publicado 2013-10-13 · Atualizado 2017-08-29 · CVE-2013-4056

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 8.7 through FP2 IBM InfoSphere Information Server versions 9.1 through 9.1.2.0

Description A cross-site request forgery (CSRF) issue affects the Data Quality Console and Information Analyzer components, allowing remote attackers to hijack the authentication of arbitrary users.

Recommendations For IBM InfoSphere Information Server versions 8.7 through FP2, update to a version later than FP2 to resolve the issue. For IBM InfoSphere Information Server versions 9.1 through 9.1.2.0, update to a version later than 9.1.2.0 to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2013-4056

Produtos afetados

Ibm Infosphere Information Server

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4056 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21652413 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86545 · Nota