• info
• discussion
• exploit
• solution
• references

IBM InfoSphere Data Quality Console/Information Analyzer Cross Site Request Forgery Vulnerability

IBM InfoSphere Data Quality Console and Information Analyzer are prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.

InfoSphere Data Quality Console 9.1 and InfoSphere Information Analyzer 8.7, and 9.1 are vulnerable.