CVE-2024-40685 — IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack

CVE-2024-40685

IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack PUBLISHED

Description (CNA)

IBM Operations Analytics – Log Analysis versions 1.3.5.0 through 1.3.8.3 and IBM SmartCloud Analytics – Log Analysis are vulnerable to a cross-site request forgery (CSRF) vulnerability that could allow an attacker to trick a trusted user into performing unauthorized actions.

Affected (CNA)

Vendor / product	Versions
IBM / Operations Analytics - Log Analysis	affected 1.3.5.0 through 1.3.8.3

CWE

CWE-352

References

https://www.ibm.com/support/pages/node/7256429

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.