CVE-2013-4000: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) start or (2) stop services.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4000?
CVE-2013-4000 is classified as a high severity vulnerability due to its potential for unauthorized access and control over IBM Cognos Command Center services.
How do I fix CVE-2013-4000?
To fix CVE-2013-4000, you should upgrade IBM Cognos Command Center to version 10.2 or later, which addresses the multiple CSRF vulnerabilities.
Who is affected by CVE-2013-4000?
Users of IBM Cognos Command Center prior to version 10.2, specifically versions 10.0 and up to 10.1, are affected by CVE-2013-4000.
What are the consequences of exploiting CVE-2013-4000?
Exploiting CVE-2013-4000 allows remote attackers to hijack the authentication of administrators, potentially allowing them to start or stop services without authorization.
What types of attacks are associated with CVE-2013-4000?
CVE-2013-4000 is associated with cross-site request forgery (CSRF) attacks that target administrative functionalities in IBM Cognos Command Center.