CVE-2013-4000

EUVD-2013-3932
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) start or (2) stop services.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
Affected Products (NVD)
VendorProductVersion
ibmcognos_command_center
𝑥
≤ 10.1
ibmcognos_command_center
10.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg21657932
https://exchange.xforce.ibmcloud.com/vulnerabilities/85150
http://www-01.ibm.com/support/docview.wss?uid=swg21657932
https://exchange.xforce.ibmcloud.com/vulnerabilities/85150