CVE-2010-3271 | BDVDB-2026-46668 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that disable certain security options via an Edit action to console/adminSecurityDetail.do followed by a save action to console/syncworkspace.do.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/518465/100/0/threaded
http://www.coresecurity.com/content/IBM-WebSphere-CSRF
http://www.securityfocus.com/bid/48305
http://www.exploit-db.com/exploits/17404
http://securityreason.com/securityalert/8281

Exploit#

http://www.exploit-db.com/exploits/17404

History#

Version 12011-07-18Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.