PT-2015-5541 · Ibm · Ibm Security Qradar Vulnerability Manager
John Zuccato
+3
·
Published
2015-11-08
·
Updated
2015-11-09
·
CVE-2015-1997
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
IBM Security QRadar Vulnerability Manager versions 7.2.x through 7.2.5 before Patch 5
Description
A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Recommendations
For versions 7.2.x through 7.2.5 before Patch 5, apply Patch 5 to resolve the issue.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Security Qradar Vulnerability Manager