Skip to content
OpenAdvisories
Unscored CVE-2016-0377 EUVD-2016-0412GHSA-q723-9g7p-28r9

The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 …

Published Oct 22, 2016 · Updated Aug 5, 2024 · Assigned by ibm

Description

The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

References