Lucene search
HistoryMay 16, 2014 - 11:12 a.m.
CVE-2014-0933
cve
2014
0933
cross-site request forgery
csrf
ibm
infosphere
information server
metadata workbench
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.8%
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users.
Affected configurations
Node
ibminfosphere_information_server_metadata_workbenchMatch8.1.0
ORibminfosphere_information_server_metadata_workbenchMatch8.1.0.1
ORibminfosphere_information_server_metadata_workbenchMatch8.1.0.2
ORibminfosphere_information_server_metadata_workbenchMatch8.1.1
ORibminfosphere_information_server_metadata_workbenchMatch8.5.0
ORibminfosphere_information_server_metadata_workbenchMatch8.5.0.1
ORibminfosphere_information_server_metadata_workbenchMatch8.5.0.2
ORibminfosphere_information_server_metadata_workbenchMatch8.5.0.3
ORibminfosphere_information_server_metadata_workbenchMatch8.7.0
ORibminfosphere_information_server_metadata_workbenchMatch8.7.0.1
ORibminfosphere_information_server_metadata_workbenchMatch8.7.0.2
ORibminfosphere_information_server_metadata_workbenchMatch9.1.0
ORibminfosphere_information_server_metadata_workbenchMatch9.1.0.1
Related
cvelist
cvelist
CVE-2014-0933
2014-05-16 10:00:00
nvd
nvd
CVE-2014-0933
2014-05-16 11:12:00
prion
prion
Cross site request forgery (csrf)
2014-05-16 11:12:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.8%
Related for CVE-2014-0933