Description
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
References
- 48967 third-party-advisory
- http://www.ibm.com/support/docview.wss?uid=swg21592188
- ae-multiple-csrf(74370) vdb-entry
- 48968 third-party-advisory
- 53247 vdb-entry