Required CVE Record Information
Description
The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
References 4 Total
- securitytracker.com: 1036653 vdb-entry
- securityfocus.com: 92514 vdb-entry
- www-01.ibm.com: PI56917 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21980645
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 4 Total
- securitytracker.com: 1036653 vdb-entryx_transferred
- securityfocus.com: 92514 vdb-entryx_transferred
- www-01.ibm.com: PI56917 vendor-advisoryx_transferred
- http://www-01.ibm.com/support/docview.wss?uid=swg21980645 x_transferred