Lucene search
HistorySep 10, 2014 - 10:55 a.m.
CVE-2014-4789
cve-2014-4789
session fixation
ibm
initiate master data service
vulnerability
web sessions
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.9%
Session fixation vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote attackers to hijack web sessions via unspecified vectors.
Affected configurations
Node
ibminitiate_master_data_serviceMatch9.5
ORibminitiate_master_data_serviceMatch9.7
ORibminitiate_master_data_serviceMatch10.0
ORibminitiate_master_data_serviceMatch10.1
Related
nvd
nvd
CVE-2014-4789
2014-09-10 10:55:08
prion
prion
Session fixation
2014-09-10 10:55:00
cvelist
cvelist
CVE-2014-4789
2014-09-10 10:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.9%
Related for CVE-2014-4789