Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Sterling Connect:Direct Web Services cross-site request forgery
Vulnerability Description
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
IBM Sterling Connect:Direct Web Services 跨站请求伪造漏洞
Vulnerability Description
IBM Sterling Connect:Direct Web Services是美国国际商业机器(IBM)公司的一套基于文件的点对点文件传输解决方案。 IBM Sterling Connect:Direct Web Services 6.0版本、6.1版本、6.2版本和6.3版本存在跨站请求伪造漏洞,该漏洞源于容易受到跨站请求伪造的攻击,允许攻击者执行从网站信任的用户传输的恶意和未经授权的操作。
CVSS Information
N/A
Vulnerability Type
N/A