CVE-2012-5950

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-23 · updated 2026-06-16
Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to hijack the authentication of arbitrary users for requests that modify data records via vectors involving (1) the html/en/default/ directory or (2) sqa/html/en/default/process/comm/saveProps.jsp.

Affected products

IBM TRIRIGA Application Platform: 2.1, 2.5, 2.6, 2.7, 3.0, 3.1 (+3)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21628849
https://exchange.xforce.ibmcloud.com/vulnerabilities/80630
http://www-01.ibm.com/support/docview.wss?uid=swg21628849
https://exchange.xforce.ibmcloud.com/vulnerabilities/80630

Get alerted when CVE-2012-5950 or the next vulnerability affects your stack