Test ID:	1.3.6.1.4.1.25623.1.0.902610
Category:	Web Servers
Title:	IBM WebSphere Application Server < 7.0.0.14 Multiple CSRF Vulnerabilities
Summary:	IBM WebSphere Application Server is prone to cross-site request; forgery (CSRF) vulnerabilities.
Description:	Summary: IBM WebSphere Application Server is prone to cross-site request forgery (CSRF) vulnerabilities. Vulnerability Insight: The flaws are due to by improper validation of user-supplied input in the Global Security panel and master configuration save functionality which allows attacker to force a logged-in administrator to perform unwanted actions. Vulnerability Impact: Successful exploitation will allow remote users to gain sensitive information or conduct other malicious activities. Affected Software/OS: IBM WebSphere Application Server version 7.0.0.13 and prior. Solution: Update to version 7.0.0.14 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3271 BugTraq ID: 48305 http://www.securityfocus.com/bid/48305 Bugtraq: 20110615 CORE-2010-1021: IBM WebSphere Application Server Cross-Site Request Forgery (Google Search) http://www.securityfocus.com/archive/1/518465/100/0/threaded http://www.exploit-db.com/exploits/17404 http://www.coresecurity.com/content/IBM-WebSphere-CSRF http://securityreason.com/securityalert/8281
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.