6.8
CVSSv2

CVE-2010-3271

Published: 18/07/2011 Updated: 10/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and previous versions allow remote malicious users to hijack the authentication of administrators for requests that disable certain security options via an Edit action to console/adminSecurityDetail.do followed by a save action to console/syncworkspace.do.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm websphere application server 7.0.0.3

ibm websphere application server 7.0.0.1

ibm websphere application server 7.0.0.2

ibm websphere application server 6.0.2.30

ibm websphere application server 6.1.0.19

ibm websphere application server 6.1.0.1

ibm websphere application server 6.1.0.2

ibm websphere application server 6.0.2.4

ibm websphere application server 6.1.0.17

ibm websphere application server 6.0.2.3

ibm websphere application server 6.0.2.13

ibm websphere application server 6.0.2.11

ibm websphere application server 6.0.2.17

ibm websphere application server 6.0.2.15

ibm websphere application server

ibm websphere application server 7.0.0.6

ibm websphere application server 7.0.0.8

ibm websphere application server 6.1.0.33

ibm websphere application server 6.0.2.32

ibm websphere application server 6.1.0.3

ibm websphere application server 6.1.0.5

ibm websphere application server 6.1.0.0

ibm websphere application server 6.1.0.27

ibm websphere application server 6.1.0.11

ibm websphere application server 6.0.2.1

ibm websphere application server 6.0

ibm websphere application server 6.0.0.1

ibm websphere application server 6.1.0.23

ibm websphere application server 6.0.1.5

ibm websphere application server 6.0.1.7

ibm websphere application server 6.1.0.9

ibm websphere application server 6.0.2.25

ibm websphere application server 6.1.7

ibm websphere application server 7.0.0.5

ibm websphere application server 7.0.0.9

ibm websphere application server 6.1.0.29

ibm websphere application server 6.0.2.31

ibm websphere application server 6.0.2.28

ibm websphere application server 6.1.0.21

ibm websphere application server 6.0.2.6

ibm websphere application server 6.0.2.5

ibm websphere application server 6.0.2.9

ibm websphere application server 6.0.2.7

ibm websphere application server 6.0.2.2

ibm websphere application server 6.0.2.19

ibm websphere application server 6.0.0.2

ibm websphere application server 6.0.0.3

ibm websphere application server 6.1.13

ibm websphere application server 6.0.2.27

ibm websphere application server 6.0.1.13

ibm websphere application server 6.0.2.23

ibm websphere application server 6.0.2.22

ibm websphere application server 5.1.1.16

ibm websphere application server 5.1.1.15

ibm websphere application server 5.1.1.14

ibm websphere application server 5.1.1.6

ibm websphere application server 5.1.1.1

ibm websphere application server 5.1.0.2

ibm websphere application server 5.0.2.3

ibm websphere application server 5.0.2.2

ibm websphere application server 5.0.2.16

ibm websphere application server 5.0.2.1

ibm websphere application server 5.0.2

ibm websphere application server 5.1.1.13

ibm websphere application server 3.5.1

ibm websphere application server 3.5

ibm websphere application server 3.0

ibm websphere application server 2.0

ibm websphere application server 6.0.1.15

ibm websphere application server 6.0.1.17

ibm websphere application server 6.0.1.11

ibm websphere application server 6.0.1.9

ibm websphere application server 6.1.14

ibm websphere application server 6.1.1

ibm websphere application server 5.1.1.11

ibm websphere application server 5.1.1.8

ibm websphere application server 5.1.1.7

ibm websphere application server 5.1.1.4

ibm websphere application server 5.1.0

ibm websphere application server 5.1.0.4

ibm websphere application server 5.0.2.5

ibm websphere application server 5.1.1.17

ibm websphere application server 5.0.2.10

ibm websphere application server 5.0.2.11

ibm websphere application server 4.0.1

ibm websphere application server 4.0.2

ibm websphere application server 3.0.21

ibm websphere application server 3.0.2.4

ibm websphere application server 5.1.1.9

ibm websphere application server 5.1.1.2

ibm websphere application server 5.1.1.5

ibm websphere application server 5.1.1

ibm websphere application server 5.1.0.3

ibm websphere application server 5.0.2.7

ibm websphere application server 5.0.2.6

ibm websphere application server 5.0.2.4

ibm websphere application server 5.0.2.13

ibm websphere application server 5.0.2.12

ibm websphere application server 5.0

ibm websphere application server 4.0.3

ibm websphere application server 4.0.4

ibm websphere application server 3.52

ibm websphere application server 3.0.2.3

ibm websphere application server 3.0.2.2

ibm websphere application server 7.0.0.11

ibm websphere application server 7.0.0.4

ibm websphere application server 7.0.0.7

ibm websphere application server 7.0

ibm websphere application server 6.0.2.29

ibm websphere application server 6.1.0.31

ibm websphere application server 6.1.0.15

ibm websphere application server 6.1.0.7

ibm websphere application server 6.1.0.25

ibm websphere application server 6.1.0

ibm websphere application server 6.0.2

ibm websphere application server 6.1

ibm websphere application server 6.0.1

ibm websphere application server 6.0.1.2

ibm websphere application server 6.0.1.3

ibm websphere application server 6.0.1.1

ibm websphere application server 6.1.0.12

ibm websphere application server 6.0.2.24

ibm websphere application server 6.1.6

ibm websphere application server 6.1.5

ibm websphere application server 6.1.3

ibm websphere application server 5.1.1.3

ibm websphere application server 5.1.1.12

ibm websphere application server 5.1.0.5

ibm websphere application server 5.1.1.10

ibm websphere application server 5.0.2.9

ibm websphere application server 5.0.2.8

ibm websphere application server 5.0.2.14

ibm websphere application server 5.0.2.15

ibm websphere application server 5.0.0

ibm websphere application server 5.0.1

ibm websphere application server 3.5.3

ibm websphere application server 3.5.2

ibm websphere application server 3.0.2.1

ibm websphere application server 3.0.2

Exploits

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory corelabscoresecuritycom/ IBM WebSphere Application Server Cross-Site Request Forgery 1 *Advisory Information* Title: IBM WebSphere Application Server Cross-Site Request Forgery Advisory ID: CORE-2010-1021 Advisory URL: wwwc ...