CVE-2009-1733

Description

Cross-site request forgery (CSRF) vulnerability in IPplan 4.91a allows remote attackers to hijack the authentication of administrators for requests that (1) change the password, (2) add users, or (3) delete users via unknown vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/50632

http://secunia.com/advisories/34985

http://osvdb.org/54601

http://holisticinfosec.org/content/view/113/45/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS