CVE-2014-0873
IBM InfoSphere Master Data Management Server 8.5-10.1 - Cross-Site Request Forgery
Title source: llmDescription
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management (MDM) Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.15 allow remote attackers to hijack the authentication of arbitrary users.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21666462
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/90994
Scores
EPSS
0.0057
EPSS Percentile
43.1%
Details
CWE
CWE-352
Status
published
Products (5)
ibm/infosphere_master_data_management_server
8.5
ibm/infosphere_master_data_management_server
9.0.1
ibm/infosphere_master_data_management_server
9.0.2
ibm/infosphere_master_data_management_server
10.0
ibm/infosphere_master_data_management_server
10.1
Published
Mar 16, 2014
Tracked Since
Feb 18, 2026