CVE-2012-3309 in InfoSphere Guardium

Summary

Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 06/07/2012
• Disclosure: 08/29/2012
• Moderation: VulDB entry created
• Entries: VDB-61941 (1)
• CPE: ready
• CWE: CWE-352 (Confirmed)
• CVSS: 6.3
• EPSS: 0.00146
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-3309
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-3309
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-3309/