CVE-2014-0969

Currently unrated

Key Information:

Vendor
IBM
Status
Infosphere Master Data Management Server For Product Information Management
Infosphere Master Data Management
Vendor
CVE Published:
17 August 2014

Summary

Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users.

References

http://secunia.com/advisories/60693
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/69262
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/92885
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.