534
VMScore

CVE-2016-0386

Published: 02/07/2016 Updated: 06/07/2016
CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8
CVSS v3 Base Score: 8 | Impact Score: 5.9 | Exploitability Score: 2.1
VMScore: 534
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 prior to 3.3.2.6, 3.4 prior to 3.4.2.4, and 3.5 prior to 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm tririga application platform 3.5.0.0

ibm tririga application platform 3.4.2.2

ibm tririga application platform 3.3.2.5

ibm tririga application platform 3.3.2.3

ibm tririga application platform 3.3.1.1

ibm tririga application platform 3.3.0.2

ibm tririga application platform 3.3.0.0

ibm tririga application platform 3.4.2.0

ibm tririga application platform 3.4.1.3

ibm tririga application platform 3.4.1.2

ibm tririga application platform 3.4.1.1

ibm tririga application platform 3.5.0.1

ibm tririga application platform 3.3.2.1

ibm tririga application platform 3.3.2.0

ibm tririga application platform 3.3.1.3

ibm tririga application platform 3.3.1.2

ibm tririga application platform 3.4.2.3

ibm tririga application platform 3.4.2.1

ibm tririga application platform 3.4.0.0

ibm tririga application platform 3.3.2.4

ibm tririga application platform 3.3.1.0

ibm tririga application platform 3.3.0.1