Security Advisory
CVE-2016-0377
4.3
MEDIUM
Vulnerability Description
The Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, and 8.5.x before 8.5.5.10 mishandles CSRFtoken cookies, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Published Date
October 22, 2016
Official Source
NIST NVD Advisory