Boletines de Vulnerabilidades

IBM Security Bulletin: Cross-Site Request Forgery Vulnerability in IBM WebSphere Portal (CVE-2016-2901)

   
Software afectado IBM
 
A fix is available for a Cross-Site Request Forgery vulnerability in IBM WebSphere Portal (CVE-2016-2901).CVE(s): CVE-2016-2901Affected product(s) and affected version(s):IBM WebSphere Portal 8.5 (CF08 – CF10 inclusive)Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www-01.ibm.com/support/docview.wss?uid=swg21983974X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/113194

More info:

https://www.ibm.com/blogs/psirt/ibm-security-bulletin-cross-site-request-forgery-vulnerability-in-ibm-websphere-portal-cve-2016-2901/