CVEvulnerability
CVE-2013-4000
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) start or (2) stop services.
Affected configurations
• ibm cognos command center (<= 10.1)
• ibm cognos command center 10.0
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21657932 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85150 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21657932 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/85150 exchange.xforce.ibmcloud.com