CVE-2020-26516: CSRF
A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4. Requests sent to the server that trigger actions do not contain a CSRF token and can therefore be entirely predicted allowing attackers to cause the victim's browser to execute undesired actions in the web application through crafted requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-26516?
CVE-2020-26516 has been classified as a medium severity vulnerability due to its potential exploitation via CSRF attacks.
How can I mitigate CVE-2020-26516?
To mitigate CVE-2020-26516, ensure that your application is updated to a version that includes CSRF protection.
Which versions of Intland codeBeamer ALM are affected by CVE-2020-26516?
CVE-2020-26516 affects Intland codeBeamer ALM versions 10.x through 10.1.SP4.
What type of vulnerability is listed as CVE-2020-26516?
CVE-2020-26516 is classified as a Cross-Site Request Forgery (CSRF) vulnerability.
Can CVE-2020-26516 be exploited remotely?
Yes, CVE-2020-26516 can be exploited remotely as it allows attackers to perform actions on behalf of victims without their consent.