Cross-site request forgery (CSRF) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x has unknown impact and remote attack vectors. NOTE: some of these details are obtained from third party information.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
http://www.securitytracker.com/id?1020236 | vdb entry |
http://www-1.ibm.com/support/docview.wss?uid=swg1PJ33180 | vendor advisory |
http://secunia.com/advisories/30433 | third party advisory vendor advisory |