Test Kennung:	1.3.6.1.4.1.25623.1.0.811019
Kategorie:	Web Servers
Titel:	IBM WebSphere Application Server CSRF Vulnerability (swg22001226)
Zusammenfassung:	IBM WebSphere Application Server is prone to a cross-site; request forgery (CSRF) vulnerability.
Beschreibung:	Summary: IBM WebSphere Application Server is prone to a cross-site request forgery (CSRF) vulnerability. Vulnerability Insight: The flaw exists as the application fails to properly validate HTTP requests. Vulnerability Impact: Successful exploitation of this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. Affected Software/OS: IBM WebSphere Application Server versions 9.0.0.0 through 9.0.0.3, 8.5.0.0 through 8.5.5.11, 8.0.0.0 through 8.0.0.13, 7.0.0.0 through 7.0.0.43 amd WebSphere Application Server Liberty prior to 17.0.0.2. Solution: Update to version 9.0.0.4, 8.5.5.12, 8.0.0.14, 7.0.0.45 or later (WebSphere Application Server) or version 17.0.0.2 or later (WebSphere Liberty). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1194 BugTraq ID: 98142 http://www.securityfocus.com/bid/98142 http://www.securitytracker.com/id/1038378
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.