Description
Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
References
- PM18909 vendor-advisory
- 41722 third-party-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg27004980
- ADV-2010-2595 vdb-entry
- was-admin-console-csrf(62949) vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg27014463
- PM23874 vendor-advisory
- 43875 vdb-entry