CVE-2012-0748

Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified services in IBM Rational Team Concert (RTC) 4.x before 4.0.0.1 allow remote attackers to hijack the authentication of arbitrary users for requests that modify work items.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
VendorProductVersion
ibmrational_team_concert
4.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/50789
http://www-01.ibm.com/support/docview.wss?uid=swg21612356
http://www.securityfocus.com/bid/55730
https://exchange.xforce.ibmcloud.com/vulnerabilities/74736
http://secunia.com/advisories/50789
http://www-01.ibm.com/support/docview.wss?uid=swg21612356
http://www.securityfocus.com/bid/55730
https://exchange.xforce.ibmcloud.com/vulnerabilities/74736