Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-40685 EUVD-2024-55398GHSA-4gxg-c5q9-vqvm

IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack

Published Feb 4, 2026 · Updated Feb 5, 2026 · Assigned by ibm

Vendor: IBM Product: Operations Analytics - Log Analysis

Description

IBM Operations Analytics – Log Analysis versions 1.3.5.0 through 1.3.8.3 and IBM SmartCloud Analytics – Log Analysis are vulnerable to a cross-site request forgery (CSRF) vulnerability that could allow an attacker to trick a trusted user into performing unauthorized actions.

Affected products

VendorProductAffectedFixed
IBM Operations Analytics - Log Analysis 1.3.5.0 – ≤ 1.3.8.3 —

References