CVE-2014-3015 Cross-site request forgery (CSRF) vulnerability in the Web player in IBM Sametime Proxy Server and Web Client 9.0 through 9.0.0.1 allows remote attackers to hijack the authentication of arbitrary user...
MediumCVSS 6.8
EPSS 0.56%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the Web player in IBM Sametime Proxy Server and Web Client 9.0 through 9.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm sametime proxy server and web client | = 9.0.0.0 | No fix listed |
| ibm sametime proxy server and web client | = 9.0.0.1 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- ibm-sametime-cve20143015-csrf(93026) vdb-entry