CVE-2018-1455

CWE-352 — Cross-Site Request Forgery (CSRF)5 documents5 sources

Severity

8.8HIGH

EPSS

0.1%

top 69.68%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Tivoli Application Dependency Discovery Manager

Timeline

PublishedAug 15

Latest updateMay 13

Description

IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 11029.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/tivoli_application_dependency_discovery_manager7.2.2, 7.3+1

▶NVDibm/tivoli_application_dependency_discovery_manager7.2.2, 7.3.0+1

🔴Vulnerability Details

GHSA

GHSA-678m-5328-r677: IBM Tivoli Application Dependency Discovery Manager 7↗2022-05-13

▶

CVEList

CVE-2018-1455: IBM Tivoli Application Dependency Discovery Manager 7↗2018-08-15

▶

💥Exploits & PoCs

Exploit-DB

NewMark CMS 2.1 - 'sec_id' SQL Injection↗2018-06-20

▶

💬Community

Bugzilla

CVE-2017-14063 async-http-client: Invalid URL parsing with '?'↗2017-09-01

▶