Vulnerability Bulletins |
IBM Security Bulletin: IBM Forms Experience Builder vulnerable to CSRF when configured with non default settings (CVE-2016-2884) |
|
| Affected software | IBM |
|
A cross-site request forgery attack is possible when configured with non default settings, caused by improper validation of user-supplied input.CVE(s): CVE-2016-2884Affected product(s) and affected version(s):IBM Forms Experience Builder 8.5 IBM Forms Experience Builder 8.5.1 IBM Forms Experience Builder 8.6.xRefer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21987252X-Force Database: More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-ibm-forms-experience-builder-vulnerable-to-csrf-when-configured-with-non-default-settings-cve-2016-2884/ |
|