Description (CNA)
Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://unisys.com
- https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=69
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.