CVE-2018-2000: CSRF
IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154890.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-2000.
What is the severity level of CVE-2018-2000?
The severity level of CVE-2018-2000 is high.
What software versions are affected by this vulnerability?
IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1, as well as IBM Business Process Manager 8.6.0.0 with CF2017.12 and CF2018.03 are affected by this vulnerability.
What is cross-site request forgery?
Cross-site request forgery is a type of attack where a malicious website tricks a user's browser into taking unwanted actions on a trusted website.
How can I fix CVE-2018-2000?
To fix CVE-2018-2000, it is recommended to apply the necessary patches or updates provided by IBM. Additionally, implementing web application firewalls and using anti-CSRF tokens can help mitigate the risk of cross-site request forgery attacks.