Vulnerability CVE-2013-5427
Published: 2014-02-04

Description:
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote attackers to hijack the authentication of arbitrary users.

Type:

CWE-352

 (Cross-Site Request Forgery (CSRF))

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
6.4/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
IBM -> Infosphere master data management collaboration server 
IBM -> Infosphere master data management server for product information management 

 References:
http://xforce.iss.net/xforce/xfdb/87536
http://www.ibm.com/support/docview.wss?uid=swg21663181
Copyright 2024, cxsecurity.com

 

Back to Top