Lucene search

[email protected]CVE-2014-0969

HistoryAug 17, 2014 - 11:55 p.m.

CVE-2014-0969

2014-08-1723:55:00

CWE-352

[email protected]

web.nvd.nist.gov

ibm

infosphere

master data management

csrf

vulnerability

gds

component

nvd

6.8 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

65.3%

JSON

Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users.

CPENameOperatorVersion
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq10.0.0.1
ibm:infosphere_master_data_managementibm infosphere master data managementeq10.1
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq9.1
ibm:infosphere_master_data_managementibm infosphere master data managementeq10.0
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq10.0
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq11.3
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq10.0.1
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq10.1
ibm:infosphere_master_data_managementibm infosphere master data managementeq11.0
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq10.1.0.1

CPE	Name	Operator	Version
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	10.0.0.1
ibm:infosphere_master_data_management	ibm infosphere master data management	eq	10.1
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	9.1
ibm:infosphere_master_data_management	ibm infosphere master data management	eq	10.0
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	10.0
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	11.3
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	10.0.1
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	10.1
ibm:infosphere_master_data_management	ibm infosphere master data management	eq	11.0
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	10.1.0.1

Rows per page:

1-10 of 141

References

secunia.com/advisories/60679

secunia.com/advisories/60693

secunia.com/advisories/60695

www-01.ibm.com/support/docview.wss?uid=swg21681649

www.securityfocus.com/bid/69262

exchange.xforce.ibmcloud.com/vulnerabilities/92885

6.8 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

65.3%

JSON

Related for CVE-2014-0969

cvelist1 ibm1 prion1