製品・ソフトウェアに関する情報
Vulnerability Search
IBM Atlas Policy Suite コンポーネントの複数の製品におけるクロスサイトリクエストフォージェリの脆弱性
Title IBM Atlas Policy Suite コンポーネントの複数の製品におけるクロスサイトリクエストフォージェリの脆弱性
Summary

IBM Atlas Policy Suite コンポーネントの IBM Disposal and Governance Management for IT および IBM Global Retention Policy and Schedule Management には、クロスサイトリクエストフォージェリの脆弱性が存在します。

Possible impacts 攻撃者により、Web サイトが信頼するユーザから送信された、悪意のある権限のない操作を実行される可能性があります。
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date June 29, 2016, midnight
Registration Date May 10, 2017, 3:30 p.m.
Last Update May 10, 2017, 3:30 p.m.
CVSS3.0 : 重要
Score 8.8
Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS2.0 : 警告
Score 6.8
Vector AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected System
IBM
IBM Disposal and Governance Management for IT 
IBM Global Retention Policy and Schedule Management 
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
0 [2017年05月10日]
  掲載		 Feb. 17, 2018, 10:37 a.m.
NVD Vulnerability Information
CVE-2016-6100
Summary

IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 2000771.

Publication Date April 6, 2017, 3:59 a.m.
Registration Date Jan. 26, 2021, 2:14 p.m.
Last Update Nov. 21, 2024, 11:55 a.m.
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.1.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.3.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.3.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.1.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.1.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:disposal_and_governance_management_for_it:6.0.1.5:*:*:*:*:*:*:*
Configuration2 or higher or less more than less than
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.1.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.3.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.1.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.3.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.1.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:global_retention_policy_and_schedule_management:6.0.1.4:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List