CVE-2012-3309

EUVD-2012-3287
Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
Affected Products (NVD)
VendorProductVersion
ibminfosphere_guardium
𝑥
≤ 8.2
ibminfosphere_guardium
8.00
ibminfosphere_guardium
8.01
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://en.securitylab.ru/lab/
http://en.securitylab.ru/lab/PT-2012-15
http://www.ibm.com/support/docview.wss?uid=swg21609223
http://www.securitytracker.com/id?1027455
https://exchange.xforce.ibmcloud.com/vulnerabilities/77745
http://en.securitylab.ru/lab/
http://en.securitylab.ru/lab/PT-2012-15
http://www.ibm.com/support/docview.wss?uid=swg21609223
http://www.securitytracker.com/id?1027455
https://exchange.xforce.ibmcloud.com/vulnerabilities/77745