CVE-2013-2980 Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access m...
MediumCVSS 6.8
EPSS 0.57%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm data studio | = 3.1.0 | No fix listed |
| ibm data studio | = 3.1.1 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- datastudio-cve20132980-csrf(84113) vdb-entry