medium6.8
CVE-2014-0969
Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0…
Impact
Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Infosphere Master Data Management | Versions 10.0, 10.1, 11.0, 11.3 |
| Ibm | Infosphere Master Data Management Server For Product Information Management | Versions 9.0, 9.1, 10.0, 10.0.0.1, 10.0.1, 10.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/60679
- http://secunia.com/advisories/60693
- http://secunia.com/advisories/60695
- http://www-01.ibm.com/support/docview.wss?uid=swg21681649
- http://www.securityfocus.com/bid/69262
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92885
- http://secunia.com/advisories/60679
- http://secunia.com/advisories/60693
- http://secunia.com/advisories/60695
- http://www-01.ibm.com/support/docview.wss?uid=swg21681649
- http://www.securityfocus.com/bid/69262
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92885