CVE-2016-2901 | BDVDB-2026-76633 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg1PI62594
http://www.securitytracker.com/id/1036143
http://www-01.ibm.com/support/docview.wss?uid=swg21983974

Exploit#

No public exploit known

History#

Version 12016-06-26Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.