Description
Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
References
- IV89797 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21991867
- 94596 vdb-entry