CVE-2016-0295 Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows remote attackers to hijack the authentication of arbitrary users for requests that...
HighCVSS 8.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111363.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm bigfix platform | >= 9.5, < 9.5.2 | 9.5.2 |
| ibm bigfix platform | = 9.0 | No fix listed |
| ibm bigfix platform | = 9.1 | No fix listed |
| ibm bigfix platform | = 9.2 | No fix listed |
References
- www-01.ibm.com mitigation vendor-advisory
- ibm-mdm-cve20160295-csrf(111363) vdb-entry vendor-advisory