CVE-2016-0348

Published: Feb 21, 2018Modified: Nov 21, 2024

8.0

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813.

Affected (4)

Products: Ibm: Tririga Application Platform

Ibm

1 product

Tririga Application Platform

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Tririga Application Platform	Version 3.3.0.0
Ibm Tririga Application Platform	Version 3.3.1.0
Ibm Tririga Application Platform	Version 3.3.2.0
Ibm Tririga Application Platform	Version 3.4.0.0