Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3 8.7.x through 8.7 FP2 and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.