CVE:CVE-2007-5799
CNNVD:CNNVD-200711-030
IBM WebSphere Application Server (WAS)的UDDI用户控制台的uddigui/navigateTree.do中存在多个跨站请求伪造漏洞。远程攻击者可以借助(1) keyField, (2) nameField, (3) valueField, 和 (4) frameReturn参数，像WAS UDD用户那样执行某些操作。
solution:Upgrade ibm websphere_application_server to a higher version than 6.1.0.12,and avoid the version (,6.1.0.12]