Security Bulletin: IBM Worklight and IBM Mobile Foundation application authenticity bypass (CVE-2014-0888)

Summary IBM Worklight and IBM Mobile Foundation application authenticity verification can be bypassed under certain conditions. Vulnerability Details CVEID: CVE-2014-0888 DESCRIPTION: The application authenticity feature in IBM Worklight and IBM Mobile Foundation enables the Worklight server to...

CVE-2014-0888

IBM Worklight Foundation 5.x and 6.x prior to 6.2.0.0 are affected by CVE-2014-0888, which allows bypassing the client-side application authenticity verification under certain conditions. Affected products/versions include Worklight Foundation and IBM Mobile Foundation Consumer/Enterprise Edition...