CVE-2015-7446

HIGH · 8.8 CVSS Gepubliceerd: 12-03-2016 CWE-352

Beschrijving

Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Vendors

Ibm

Affected products

Flashsystem V9000 Firmware Flashsystem 9846-ac2 Flashsystem 9846-ae2 Flashsystem 9848-ac2 Flashsystem 9848-ae2

References

www-01.ibm.com