{"id":"CVE-2013-4056","aliases":["EUVD-2013-3987","GHSA-cjhr-7jv7-3fxw"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information...","description":"Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0057,"percentile":0.47439,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2013-10-13T10:00:00Z","modified":"2026-06-16T23:56:32Z","products":[{"vendor":"ibm","product":"infosphere_information_server"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/86545","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21652413","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4056"},{"url":"https://github.com/advisories/GHSA-cjhr-7jv7-3fxw"}],"sources":{"cve":[{"id":"CVE-2013-4056","description":"Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2013-10-13T10:00:00Z","modified":"2024-08-06T16:30:49.899Z","updated_at":"2026-11-02T14:34:58.193873Z"}],"euvd":[{"id":"EUVD-2013-3987","description":"Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2013-10-13T10:00:00Z","modified":"2024-08-06T16:30:49Z","updated_at":"2026-11-03T01:56:33.227006Z"}],"ghsa":[{"id":"GHSA-cjhr-7jv7-3fxw","title":"Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information...","description":"Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2022-05-17T01:33:28Z","modified":"2023-02-03T05:04:39Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:53:36.332016Z"}],"nvd":[{"id":"CVE-2013-4056","description":"Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2013-10-13T10:20:03.757Z","modified":"2026-06-16T23:56:32.94Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:02:38.715467Z"}]}}