Vulnerability Bulletins |
IBM Security Bulletin: Cross-site Request Forgery (CSRF) security vulnerability in IBM WebSphere Commerce (CVE-2015-5007) |
|
| Affected software | IBM |
|
IBM WebSphere Commerce is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities. CVE(s): CVE-2015-5007Affected product(s) and affected version(s):WebSphere Commerce version 7.0 Feature Pack 8 More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_cross_site_request_forgery_csrf_security_vulnerability_in_ibm_websphere_commerce_cve_2015_5007?lang=en_us |
|