Vulnerability Bulletins |
IBM Security Bulletin: Reflective Cross Site Request Forgery Security Bulletin: TRIRIGA Application Platform (CVE-2014-4839) |
|
| Affected software | IBM |
|
IBM TRIRIGA Application Platform is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities. Impacted URL is /birtviewer.query. CVE(s): CVE-2014-4839 Affected product(s) and affected version(s): More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_reflective_cross_site_request_forgery_security_bulletin_tririga_application_platform_cve_2014_4839?lang=en_us |
|