CVE-2012-3309: IBM InfoSphere Guardium

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filtering (aka csrf_status) feature is disabled, allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

Affected products

• IBM InfoSphere Guardium: up to and including 8.2; version 8.00 only; version 8.01 only

Published 2012-08-29. Last modified 2026-06-16.