Cross site request forgery (csrf)

2019-09-2414:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

IBM Security Key Lifecycle Manager 3.0 and 3.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 165137.

CPENameOperatorVersion
security_key_lifecycle_managerge3.0.1
security_key_lifecycle_managerle3.0.1.1
security_key_lifecycle_managerge3.0.0
security_key_lifecycle_managerle3.0.0.2

Name	Operator	Version
security_key_lifecycle_manager	ge	3.0.1
security_key_lifecycle_manager	le	3.0.1.1
security_key_lifecycle_manager	ge	3.0.0
security_key_lifecycle_manager	le	3.0.0.2