CVE-2014-0969
Published Aug 17, 2014
Last updated 7 years ago
Overview
- Description
- Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users.
- Source
- psirt@us.ibm.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-352
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management:10.0:*:*:*:collaborative:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2C18237-D43D-4423-B03D-0C02EE26C2CE"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management:10.1:*:*:*:collaborative:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38FBFED0-F44F-48BF-96C0-33025890C4D5"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management:11.0:*:*:*:collaborative:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FE73850-0816-4C28-B114-4FEB2A0B6586"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management:11.3:*:*:*:collaborative:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2B51C2B1-4363-455F-8A0D-F92BEDFC0BD4"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05F44C2D-F7E1-46CB-A319-B7D21121DA53"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B31F0A6-7796-42C2-8911-1B0D1B0A26A8"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72D767E3-62D2-4D95-894A-012D64EA32F9"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E51171E-71EA-4552-ACE8-19CBF0CD5BDE"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDB0276A-2098-4D89-B920-EDD399319CDC"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8309680C-B97D-4024-867F-5BCB7DE9662A"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFB8D323-F055-47EF-A615-D2B8DBD227B1"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73EAB193-E0A4-4937-8B2E-EDABF897D4D9"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C945BE5A-0AA2-42F1-B700-120B8049A2BB"
},
{
"criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:11.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DC9B52F-E42A-4C1B-8D8A-40AB6497C2FC"
}
],
"operator": "OR"
}
]
}
]