CVE-2016-3009

Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to…

published November 30, 2016

CVSS
—
EPSS
1%
Percentile
43.6
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the Connections generic page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00524 · 43.6th percentile
Published
2016-11-30T11:00Z
EPSS history
Timeline
  • 30 NOV 11:00Z
    Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to…
    cvelistv5