medium4.3
CVE-2016-0377
The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken…
Impact
The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Application Server | Versions 7.0.0.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56917
- http://www-01.ibm.com/support/docview.wss?uid=swg21980645
- http://www.securityfocus.com/bid/92514
- http://www.securitytracker.com/id/1036653
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI56917
- http://www-01.ibm.com/support/docview.wss?uid=swg21980645
- http://www.securityfocus.com/bid/92514
- http://www.securitytracker.com/id/1036653