CVE-2012-3309: CSRF
Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrfstatus) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3309?
CVE-2012-3309 has a medium severity rating due to the potential for CSRF attacks targeting administrator accounts.
How do I fix CVE-2012-3309?
To fix CVE-2012-3309, enable CSRF filtering in the settings of IBM InfoSphere Guardium or upgrade to a later version that includes this feature by default.
What systems are affected by CVE-2012-3309?
CVE-2012-3309 affects IBM InfoSphere Guardium versions 8.0 through 8.2 if CSRF filtering is disabled.
What type of vulnerability is CVE-2012-3309?
CVE-2012-3309 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
Can CVE-2012-3309 allow unauthorized actions?
Yes, CVE-2012-3309 can allow remote attackers to hijack the authentication of administrators to create unauthorized accounts.