The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
| Version | Base score | Base severity | Vector |
|---|
| Hyperlink | Resource Type |
|---|
The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securitytracker.com/id/1036653 | vdb-entry x_refsource_SECTRACK |
| http://www.securityfocus.com/bid/92514 | vdb-entry x_refsource_BID |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI56917 | vendor-advisory x_refsource_AIXAPAR |
| http://www-01.ibm.com/support/docview.wss?uid=swg21980645 | x_refsource_CONFIRM |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securitytracker.com/id/1036653 | vdb-entry x_refsource_SECTRACK x_transferred |
| http://www.securityfocus.com/bid/92514 | vdb-entry x_refsource_BID x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI56917 | vendor-advisory x_refsource_AIXAPAR x_transferred |
| http://www-01.ibm.com/support/docview.wss?uid=swg21980645 | x_refsource_CONFIRM x_transferred |
The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 3.0 | 4.3 | MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| Primary | 2.0 | 4.0 | MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI56917 | psirt@us.ibm.com | Broken Link |
| http://www-01.ibm.com/support/docview.wss?uid=swg21980645 | psirt@us.ibm.com | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/92514 | psirt@us.ibm.com | N/A |
| http://www.securitytracker.com/id/1036653 | psirt@us.ibm.com | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI56917 | af854a3a-2127-422b-91ae-364da2661108 | Broken Link |
| http://www-01.ibm.com/support/docview.wss?uid=swg21980645 | af854a3a-2127-422b-91ae-364da2661108 | Patch Vendor Advisory |
| http://www.securityfocus.com/bid/92514 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www.securitytracker.com/id/1036653 | af854a3a-2127-422b-91ae-364da2661108 | N/A |