Boletines de Vulnerabilidades

IBM Security Bulletin: Reflective Cross Site Request Forgery Security Bulletin: TRIRIGA Application Platform (CVE-2014-4839)
Información sobre el sistema

Software afectado	IBM
Descripción
IBM TRIRIGA Application Platform is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading an authenticated user to visit a malicious Web site, a remote attacker could send a malformed HTTP request. An attacker could exploit this vulnerability to perform cross-site scripting attacks, Web cache poisoning, and other malicious activities. Impacted URL is /birtviewer.query. CVE(s): CVE-2014-4839 Affected product(s) and affected version(s): More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_reflective_cross_site_request_forgery_security_bulletin_tririga_application_platform_cve_2014_4839?lang=en_us
Identificadores estándar
Propiedad	Valor
CVE	CVE-2014-4839 ,CVE-2014-3508 ,CVE-2014-5139 ,CVE-2014-3509 ,CVE-2014-3505 ,CVE-2014-3506 ,CVE-2014-3507 ,CVE-2014-3510 ,CVE-2014-3511 ,CVE-2014-3051 ,CVE-2014-4607 and CVE-2014-3566.