Vulnerability Bulletins |
IBM Security Bulletin: IBM Security Network Protection contains a Cross-Site Request Forgery vulnerability. |
|
| Affected software | IBM |
|
IBM Security Network Protection is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities. CVE(s): CVE-2014-6198 Affected product(s) and affected version(s): IBM Security Network Protection More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_security_network_protection_contains_a_cross_site_request_forgery_vulnerability?lang=en_us |
|