Description
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allow remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
References (5)
Core 5
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/48967
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21592188
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/74370
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/48968
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/53247
Scores
EPSS
0.0054
EPSS Percentile
41.3%
Details
CWE
CWE-352
Status
published
Products (15)
ibm/rational_appscan
5.2
ibm/rational_appscan
5.4
ibm/rational_appscan
5.5.0
ibm/rational_appscan
5.5.0.1
ibm/rational_appscan
5.5.0.2
ibm/rational_appscan
5.6.0
ibm/rational_appscan
5.6.0.3
ibm/rational_appscan
8.0.0
ibm/rational_appscan
8.0.0.1
ibm/rational_appscan
8.0.0.2
... and 5 more
Published
May 03, 2012
Tracked Since
Feb 18, 2026