CVE-2012-0748

EUVD-2012-0780
Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified services in IBM Rational Team Concert (RTC) 4.x before 4.0.0.1 allow remote attackers to hijack the authentication of arbitrary users for requests that modify work items.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
Affected Products (NVD)
VendorProductVersion
ibmrational_team_concert
4.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/50789
http://www-01.ibm.com/support/docview.wss?uid=swg21612356
http://www.securityfocus.com/bid/55730
https://exchange.xforce.ibmcloud.com/vulnerabilities/74736
http://secunia.com/advisories/50789
http://www-01.ibm.com/support/docview.wss?uid=swg21612356
http://www.securityfocus.com/bid/55730
https://exchange.xforce.ibmcloud.com/vulnerabilities/74736