CVE-2016-0386
02.07.2016, 14:59
Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees.
| Vendor | Product | Version |
|---|---|---|
| ibm | tririga_application_platform | 3.3.0.0 |
| ibm | tririga_application_platform | 3.3.0.1 |
| ibm | tririga_application_platform | 3.3.0.2 |
| ibm | tririga_application_platform | 3.3.1.0 |
| ibm | tririga_application_platform | 3.3.1.1 |
| ibm | tririga_application_platform | 3.3.1.2 |
| ibm | tririga_application_platform | 3.3.1.3 |
| ibm | tririga_application_platform | 3.3.2.0 |
| ibm | tririga_application_platform | 3.3.2.1 |
| ibm | tririga_application_platform | 3.3.2.3 |
| ibm | tririga_application_platform | 3.3.2.4 |
| ibm | tririga_application_platform | 3.3.2.5 |
| ibm | tririga_application_platform | 3.4.0.0 |
| ibm | tririga_application_platform | 3.4.1.1 |
| ibm | tririga_application_platform | 3.4.1.2 |
| ibm | tririga_application_platform | 3.4.1.3 |
| ibm | tririga_application_platform | 3.4.2.0 |
| ibm | tririga_application_platform | 3.4.2.1 |
| ibm | tririga_application_platform | 3.4.2.2 |
| ibm | tririga_application_platform | 3.4.2.3 |
| ibm | tririga_application_platform | 3.5.0.0 |
| ibm | tririga_application_platform | 3.5.0.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration