Vulnerability Details CVE-2014-0873
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management (MDM) Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.15 allow remote attackers to hijack the authentication of arbitrary users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.1%
CVSS Severity
CVSS v2 Score 6.8
References
Products affected by CVE-2014-0873
-
cpe:2.3:a:ibm:infosphere_master_data_management_server:10.0
-
cpe:2.3:a:ibm:infosphere_master_data_management_server:10.1
-
cpe:2.3:a:ibm:infosphere_master_data_management_server:8.5
-
cpe:2.3:a:ibm:infosphere_master_data_management_server:9.0.1
-
cpe:2.3:a:ibm:infosphere_master_data_management_server:9.0.2