Description
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger information disclosure.
References
- PM62920 vendor-advisory
- was-wasrequrl-csrf(79598) vdb-entry
- 56458 vdb-entry
- http://www.ibm.com/support/docview.wss?uid=swg21614265