6.8
CVSSv2

CVE-2009-2746

Published: 16/11/2009 Updated: 17/08/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 prior to 6.0.2.39, 6.1 prior to 6.1.0.29, and 7.0 prior to 7.0.0.7 allows remote malicious users to hijack the authentication of administrators via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm websphere application server 6.0.2.11

ibm websphere application server 6.0.2.13

ibm websphere application server 6.0.2.24

ibm websphere application server 6.0.2.25

ibm websphere application server 6.0.2.4

ibm websphere application server 6.0.2.5

ibm websphere application server 6.0.2.16

ibm websphere application server 6.0.2.21

ibm websphere application server 6.1.0

ibm websphere application server 6.1.0.1

ibm websphere application server 6.1.0.21

ibm websphere application server 6.1.0.23

ibm websphere application server 6.1.0.27

ibm websphere application server 7.0

ibm websphere application server 6.0.2.19

ibm websphere application server 6.0.2.2

ibm websphere application server 6.0.2.29

ibm websphere application server 6.0.2.3

ibm websphere application server 6.0.2.9

ibm websphere application server 6.0.2.10

ibm websphere application server 6.0.2.33

ibm websphere application server 6.0.2.8

ibm websphere application server 6.1.0.13

ibm websphere application server 6.1.0.15

ibm websphere application server 6.1.0.2

ibm websphere application server 6.1.0.7

ibm websphere application server 6.1.0.0

ibm websphere application server 7.0.0.5

ibm websphere application server 6.0.2.15

ibm websphere application server 6.0.2.17

ibm websphere application server 6.0.2.27

ibm websphere application server 6.0.2.28

ibm websphere application server 6.0.2.6

ibm websphere application server 6.0.2.7

ibm websphere application server 6.0.2.18

ibm websphere application server 6.0.2.20

ibm websphere application server 6.1.0.11

ibm websphere application server 6.1.0.12

ibm websphere application server 6.1.0.3

ibm websphere application server 6.1.0.5

ibm websphere application server 7.0.0.1

ibm websphere application server 7.0.0.3

ibm websphere application server 6.0.2

ibm websphere application server 6.0.2.1

ibm websphere application server 6.0.2.22

ibm websphere application server 6.0.2.23

ibm websphere application server 6.0.2.30

ibm websphere application server 6.0.2.31

ibm websphere application server 6.0.2.32

ibm websphere application server 6.0.2.12

ibm websphere application server 6.0.2.14

ibm websphere application server 6.0.2.35

ibm websphere application server 6.0.2.37

ibm websphere application server 6.1.0.17

ibm websphere application server 6.1.0.19

ibm websphere application server 6.1.0.9

ibm websphere application server 6.1.0.25