Apache MyFaces Trinidad 跨站请求伪造漏洞

目前厂商暂未发布修复措施解决此安全问题，建议使用此软件的用户随时关注厂商主页或参考网址以获取解决办法：

https://security-tracker.debian.org/tracker/CVE-2021-26296

来源:MISC

链接:https://lists.apache.org/thread.html/r2b73e2356c6155e9ec78fdd8f72a4fac12f3e588014f5f535106ed9b%40%3Cannounce.apache.org%3E

来源:MISC

链接:https://packetstormsecurity.com/files/161484/Apache-MyFaces-2.x-Cross-Site-Request-Forgery.html

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20210528-0007/

来源:FULLDISC

链接:http://seclists.org/fulldisclosure/2021/Feb/66

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-information-disclosure-vulnerability-in-websphere-application-server-liberty-2/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-rational-asset-analyzer-raa-is-affected-by-a-websphere-application-server-vulnerability-cve-2021-26296/

来源:www.ibm.com

链接:https://www.ibm.com/support/pages/node/6486349

来源:www.ibm.com

链接:https://www.ibm.com/support/pages/node/6485501

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-websphere-application-server-affect-ibm-cloud-orchestrator-and-ibm-cloud-orchestrator-enterprise-3/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-myfaces-affects-liberty-for-java-for-ibm-cloud-cve-2021-26296/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1811

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-myfaces-affects-websphere-application-server-cve-2021-26296/

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Apache-MyFaces-Core-Cross-Site-Request-Forgery-via-Weak-Tokens-35037

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-xstream-java-openssl-websphere-application-server-liberty-and-node-js-affect-ibm-spectrum-control/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-a-vulnerability-in-websphere-application-server-liberty-affects-ibm-cics-tx-on-cloud/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-26296

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2132

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1321

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-cloud-transformation-advisor-is-affected-by-a-vulnerability-in-websphere-application-server-liberty-cve-2021-26296/

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2021-26296

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1200

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-novalink-is-impacted-by-apache-myfaces-affects-websphere-liberty-middle-vulnerability-in-websphere-application-server-liberty-cve-2021-26296/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-affect-ibm-tivoli-monitoring-installed-websphere-application-server-2/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/161484/Apache-MyFaces-2.x-Cross-Site-Request-Forgery.html

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-embedded-websphere-application-server-is-vulnerable-to-apache-myfaces-which-affects-content-collector-for-email/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-myfaces-affects-liberty-for-java-for-ibm-cloud-cve-2021-26296-2/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-websphere-application-server-liberty-affect-ibm-lks-administration-and-reporting-tool-and-its-agent/