VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 13, 2013· Updated Apr 29, 2026

CVE-2013-4056

CVE-2013-4056

Description

Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.

Affected products

6
  • IBM/Infosphere Information Server6 versions
    cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:8.7.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:8.7.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:9.1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_information_server:9.1.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.