Low · 3.5 CVE-2022-22493 EUVD-2022-27639GHSA-22p6-5mp7-g3v6

IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attrib…

Published Oct 7, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: WebSphere Automation for Cloud Pak for Watson AIOps

Description

IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting. IBM X-Force ID: 226449.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Automation for Cloud Pak for Watson AIOps	1.4.2	—

References

https://www.ibm.com/support/pages/node/6826727
ibm-websphere-cve202222493-csrf (226449) vdb-entry