CVE-2007-5799 | BDVDB-2026-27619 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to perform some actions as WAS UDDI users via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/26276
http://secunia.com/advisories/27448
http://www-1.ibm.com/support/docview.wss?uid=swg1PK50245
https://exchange.xforce.ibmcloud.com/vulnerabilities/38179
http://osvdb.org/41619
http://www.securitytracker.com/id?1018884

Exploit#

No public exploit known

History#

Version 12007-11-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.