CVE-2017-1769: CSRF

Published Jan 24, 2018

Updated

IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 136783.

Affected Software

1 affected component

IBM Business Process Manager=8.6.0.0

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22011579

Event History

Jan 24, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1769?

CVE-2017-1769 has been classified as a high severity vulnerability due to its potential for cross-site request forgery.

How do I fix CVE-2017-1769?

To fix CVE-2017-1769, apply the latest security patches provided by IBM for Business Process Manager 8.6.

Who is affected by CVE-2017-1769?

CVE-2017-1769 affects users of IBM Business Process Manager version 8.6.0.0.

What type of vulnerability is CVE-2017-1769?

CVE-2017-1769 is a cross-site request forgery vulnerability that can allow unauthorized actions to be executed.

What are the potential impacts of CVE-2017-1769?

The potential impacts of CVE-2017-1769 include unauthorized actions being performed on behalf of a user trusted by the website.