CVE-2016-2998

Description

Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update data.

References

http://www.securityfocus.com/bid/92578

http://www-01.ibm.com/support/docview.wss?uid=swg21988991

http://www-01.ibm.com/support/docview.wss?uid=swg1LO89929

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS