Vulnerability Bulletins |
IBM Security Bulletin: IBM TRIRIGA Application Platform Cross Site Request Forgery Vulnerability (CVE-2016-0346) |
|
| Affected software | IBM |
|
Unauthenticated requests can be made to a vulnerable web application, which then performs unauthorized action on behalf of the attacker. CVE(s): CVE-2016-0346Affected product(s) and affected version(s):The following IBM TRIRIGA Application Platform versions are affected. · IBM TRIRIGA Application Platform 3.5. · IBM TRIRIGA Application Platform 3.4. · IBM TRIRIGA Application Platform 3.3. Refer to the following reference URLs for remediation and additional vulnerability More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_tririga_application_platform_cross_site_request_forgery_vulnerability_cve_2016_0346?lang=en_us |
|