CVE-2016-9716

High

Published: 31/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM InfoSphere Master Data Management Server versions 11.0, 11.3, 11.4, 11.5, and 11.6 are vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user.

Risk Assessment

This vulnerability could lead to unauthorized access and data manipulation, posing a serious threat to the integrity of the system and user data.

Recommendation

It is recommended to implement CSRF protection mechanisms, such as CSRF tokens, and to upgrade to the latest version of the software to minimize risk.

Other vulnerabilities in IBM InfoSphere Master Data Management Server

CVE-2016-9714High
IBM InfoSphere Master Data Management Server versions 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions on behalf of a trusted user.

Original NVD description (English source)

IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119729.