CVE-2014-3037

Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational Engineering Lifecycle Manager before…

published September 10, 2014

CVSS
—
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational Engineering Lifecycle Manager before 4.0.7 and 5.x before 5.0.1, Rational Software Architect Design Manager before 4.0.7 and 5.x before 5.0.1, and Rational Rhapsody Design Manager before 4.0.7 and 5.x before 5.0.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00783 · 55.5th percentile
Published
2014-09-10T10:00Z
EPSS history
Timeline
  • 10 SEP 10:00Z
    Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational Engineering Lifecycle Manager before…
    cvelistv5