CVE-2017-1672

https://notcve.org/view.php?id=CVE-2017-1672

IBM Tivoli Key Lifecycle Manager 2.6 and 2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 133639. IBM Tivoli Key Lifecycle Manager 2.6 y 2.7 es vulnerable a ataques de tipo Cross-Site Request Forgery (CSRF). Esto podría permitir que un atacante ejecute acciones maliciosas y no autorizadas transmitidas desde un usuario en el que la web confía. IBM X-Force ID: 133639. • http://www.ibm.com/support/docview.wss?uid=swg22012019 https://exchange.xforce.ibmcloud.com/vulnerabilities/133639 • CWE-352: Cross-Site Request Forgery (CSRF) •