CVE-2010-0785

Summary

Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www-01.ibm.com/support/docview.wss?uid=swg1PM18909
• http://secunia.com/advisories/41722
• http://www-01.ibm.com/support/docview.wss?uid=swg27004980
• http://www.vupen.com/english/advisories/2010/2595
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62949
• http://www-01.ibm.com/support/docview.wss?uid=swg27014463
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM23874
• http://www.securityfocus.com/bid/43875

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1PM18909
• http://secunia.com/advisories/41722
• http://www-01.ibm.com/support/docview.wss?uid=swg27004980
• http://www.vupen.com/english/advisories/2010/2595
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62949
• http://www-01.ibm.com/support/docview.wss?uid=swg27014463
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM23874
• http://www.securityfocus.com/bid/43875

• ←Previous
• Next→