Unscored severity · published Oct 1, 2012
CVE-2012-0748
Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified services in IBM Rational Team Concert (RTC) 4.x before 4.0.0.1 allow remote attackers to hijack the…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified services in IBM Rational Team Concert (RTC) 4.x before 4.0.0.1 allow remote attackers to hijack the authentication of arbitrary users for requests that modify work items.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RT
Rational Team Concert · Ibm
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0748
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0748
secunia.com
http://secunia.com/advisories/50789
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21612356
www.securityfocus.com
http://www.securityfocus.com/bid/55730
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/74736
More from Rational Team Concert
8.8
CVE-2021-29844
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF)
8.8
CVE-2017-1701
IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an…
8.1
CVE-2017-1103
IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
8.1
CVE-2016-9707
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
7.8
CVE-2015-7440
IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;…