Required CVE Record Information
Description
IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks involving an HTTP redirect via unspecified vectors.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- http://www-01.ibm.com/support/docview.wss?uid=swg21648481 x_transferred
- exchange.xforce.ibmcloud.com: policytester-cve20134061-allowed-hosts(86585) vdb-entryx_transferred