CVE-2014-3009

IBM InfoSphere Master Data Management - Authenticated Phishing Attack via FRAME Element Handling

Title source: llm
STIX 2.1

Description

The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/92952
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21677306

Scores

EPSS 0.0065
EPSS Percentile 46.8%

Details

CWE
CWE-20
Status published
Products (5)
ibm/infosphere_master_data_management 10.0
ibm/infosphere_master_data_management 10.1
ibm/infosphere_master_data_management 11.0
ibm/infosphere_master_data_management_server_for_product_information_management 9.0
ibm/infosphere_master_data_management_server_for_product_information_management 9.1
Published Aug 01, 2014
Tracked Since Feb 18, 2026