Lucene search
HistoryDec 01, 2023 - 8:15 p.m.
CVE-2023-38268
ibm
infosphere
csrf
vulnerability
attacker
unauthorized actions
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
21.8%
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 260585.
Affected configurations
Node
ibminfosphere_information_serverRange11.7.0.0–11.7.1.0
ORibminfosphere_information_serverRange11.7.0.0–11.7.1.4on_cloud
ibmaixMatch-
ORlinuxlinux_kernelMatch-
ORmicrosoftwindowsMatch-
Related
cnvd
cnvd
ibm
ibm
cve
cve
CVE-2023-38268
2023-12-01 20:15:07
prion
prion
Cross site request forgery (csrf)
2023-12-01 20:15:00
cvelist
cvelist
CVE-2023-38268 IBM InfoSphere Information Server cross-site request forgery
2023-12-01 19:21:13
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
21.8%
Related for NVD:CVE-2023-38268