CVE-2015-0115
28.06.2015, 22:59
Cross-site request forgery (CSRF) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to hijack the authentication of customer accounts.
| Vendor | Product | Version |
|---|---|---|
| ibm | leads | 7.1.0 |
| ibm | leads | 7.1.1 |
| ibm | leads | 7.5.0 |
| ibm | leads | 8.1.0 |
| ibm | leads | 8.2.0 |
| ibm | leads | 8.5.0 |
| ibm | leads | 8.6.0 |
| ibm | leads | 9.0.0 |
| ibm | leads | 9.1.0 |
| ibm | leads | 9.1.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration