CVE-2015-6470

Resource Data Management’s Data Manager prior to version 2.2 is affected by a privilege-escalation vulnerability (CWE-269) that allows a valid authenticated user to change passwords for other users, including administrators, via unspecified vectors. Public records indicate remote access and passw...

CVE-2015-6470: Undefined Security Weakness

Resource Data Management Data Manager before 2.2 allows remote authenticated users to modify arbitrary passwords via unspecified vectors...

CVE-2015-6468: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2015-7258

Name of the Vulnerable Software and Affected Versions Resource Data Management Data Manager versions prior to 2.2 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendation...

PT-2015-7260

Name of the Vulnerable Software and Affected Versions Resource Data Management Data Manager versions prior to 2.2 Description The issue allows remote authenticated users to modify arbitrary passwords. Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue...

PT-2015-1679

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.3.0 Description The issue is related to the Concurrent Data Management Replication process, which allows remote attackers to cause a denial of service by reloading the BGP process via malformed BGPv4 packets. This is due...

CVE-2015-1984

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force...

CVE-2015-1982

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message...

Design/Logic Flaw

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message...

CVE-2015-1984

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force...

CVE-2015-1980

IBM InfoSphere Master Data Management - Collaborative Edition vulnerable to clickjacking on versions 9.1, 10.1, 11.0, 11.3, 11.4 prior to FP03. Exploitation could allow remote authenticated users to hijack the victim’s click actions via crafted HTTP requests or malicious sites. Affected versions ...

PT-2015-5521

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Collaborative Edition versions 9.1 through 11.4 before FP03 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web...

PT-2015-5528

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Collaborative Edition versions 9.1 through 11.4 before FP03 Description The issue allows remote authenticated users to conduct clickjacking attacks. Recommendations For versions 9.1 through 11.4 before FP0...

PT-2015-5530

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Collaborative Edition versions 9.1 through 11.4 before FP03 Description The issue allows remote authenticated users to obtain sensitive information via a crafted request. This is achieved by revealing the...

CVE-2015-1968: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-1984: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force...

PT-2015-5532

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Collaborative Edition versions 9.1 through 11.4 before FP03 Description The issue allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles, potentially leading t...

CVE-2015-1980: Improper Input Validation

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors...

CVE-2015-1982: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message...

IBM InfoSphere Master Data Management Information Disclosure Vulnerability (CNVD-2015-04439)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...