Security Bulletin: Cross-Site Request Forgery vulnerability in IBM InfoSphere Master Data Management Server (CVE-2014-0873)

Summary The IBM InfoSphere Master Data Management Server User Interfaces are vulnerable to Cross-Site Request Forgery attacks. Vulnerability Details CVE ID: CVE-2014-0873 DESCRIPTION: Due to insufficient safeguards against cross-site request forgery in the IBM InfoSphere Master Data Management...

CVE-2014-0873

IBM InfoSphere Master Data Management Server is affected by CSRF in the Data Stewardship, Business Admin, and Product interfaces. The issue allows an attacker to hijack a legitimate user’s session by exploiting insufficient CSRF protections. Affected versions: 8.5 before 8.5.0.82; 9.0.1 before 9....