CVE-2017-1746

High

Published: 20/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized operations on behalf of users, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to the latest version of the software to mitigate the risk associated with this vulnerability and to implement additional security mechanisms against CSRF attacks.

Other vulnerabilities in IBM Jazz for Service Management (IBM Tivoli Components 1.1.3)

CVE-2017-1631High
IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Original NVD description (English source)

IBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 135519.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS