Skip to content
OpenAdvisories
Medium · 4.5 CVE-2024-27265 EUVD-2024-24504GHSA-mp7h-h4mw-vrgf

IBM Integration Bus for z/OS cross-site request forgery

Published Mar 14, 2024 · Updated Aug 2, 2024 · Assigned by ibm

Description

IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 284564.

Affected products

VendorProductAffectedFixed
IBM Integration Bus for z/OS 10.1 – ≤ 10.1.0.3 —

Advisories 1

References