IBM Operations Analytics – Log Analysis versions 1.3.5.0 through 1.3.8.3 and IBM SmartCloud Analytics – Log Analysis are vulnerable to a cross-site request forgery (CSRF) vulnerability that could allow an attacker to trick a trusted user into performing unauthorized actions.
Principal Product and Version(s)Fix detailsIBM Operations Analytics - Log Analysis version 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3IBM strongly recommends addressing the vulnerability now by applying 1.3.8.3 Interim Fix 1 (1.3.8.3-TIV-IOALA-IF1) or later available from IBM Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes . Refer to README for upgrade instructions.