ZeroHour

CVE-2016-0348

CVSS 3.0
8.0 high
EPSS
<1%p50
Published
()
Modified
Description

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813.

Vendors
ibm
Products
tririga application platform
Weakness
CWE-352
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.