CVE-2014-6198

IBM Security Network Protection <5.3.1 - CSRF

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in IBM Security Network Protection 5.3 before 5.3.1 allows remote attackers to hijack the authentication of arbitrary users.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21958090
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032634

Scores

EPSS 0.0082
EPSS Percentile 53.0%

Details

CWE
CWE-352
Status published
Products (1)
ibm/security_network_protection_firmware 5.3
Published Jun 28, 2015
Tracked Since Feb 18, 2026