Beveiligingsadvies

CVE-2016-0377

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-10-22 01:00:00
Laatst bijgewerkt 2024-08-05 22:15:24
Toegewezen door ibm
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.