Cross-site request forgery (CSRF) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published: 2013-08-21T21:00:00

Updated: 2024-08-06T16:00:08.367Z

Reserved: 2013-04-12T00:00:00

Link: CVE-2013-3029

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-08-21T21:55:06.140

Modified: 2024-11-21T01:52:51.573

Link: CVE-2013-3029

cve-icon Redhat

No data.