CVE-2016-0386

HIGH · 8.0 CVSS Gepubliceerd: 02-07-2016 CWE-352

Beschrijving

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees.

Vendors

Ibm

Affected products

Tririga Application Platform

References

www-01.ibm.com