Vulnerability Bulletins |
IBM Security Bulletin: IBM TRIRIGA Application Platform is vulnerable to a Cross Site Request Forgery Attack. (CVE-2016-0386) |
|
| Affected software | IBM |
|
IBM TRIRIGA is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities.CVE(s): CVE-2016-0386Affected product(s) and affected version(s):The following IBM TRIRIGA Application Platform versions are More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-tririga-application-platform-is-vulnerable-to-a-cross-site-request-forgery-attack-cve-2016-0386/ |
|