Unscored CVE-2014-6125 EUVD-2014-6011GHSA-87f7-rq2h-978j

Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to hijack the authenticat…

Published Oct 28, 2014 · Updated Aug 6, 2024 · Assigned by ibm

Description

Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

References

PI26889 vendor-advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21684651
70759 vdb-entry
ibm-wsportal-cve20146125-csrf(96782) vdb-entry