CVE-2014-0929

IBM Connections <= 3.0.1.1 - Authenticated Cross-Site Request Forgery in Profiles Component

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in the Profiles component in IBM Connections through 3.0.1.1 CR3 allows remote authenticated users to hijack the authentication of arbitrary users for requests that trigger follow actions.

References (4)

Core 4
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59046
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/92261
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1LO79622
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21668509

Scores

EPSS 0.0054
EPSS Percentile 41.3%

Details

CWE
CWE-352
Status published
Products (13)
ibm/connections 1.0.0.0
ibm/connections 1.0.1.0
ibm/connections 1.0.2.0
ibm/connections 2.0.0.0
ibm/connections 2.0.1.0
ibm/connections 2.0.1.1
ibm/connections 2.5.0.0
ibm/connections 2.5.0.1
ibm/connections 2.5.0.2
ibm/connections 2.5.0.3
... and 3 more
Published Jun 08, 2014
Tracked Since Feb 18, 2026