Lucene search
IbmCVE-2013-5427HistoryFeb 04, 2014 - 5:39 a.m.
CVE-2013-5427
2014-02-0405:39:08
CWE-352
ibm
web.nvd.nist.gov
18
cve-2013-5427
cross-site request forgery
csrf
ibm infosphere
master data management
collaborative edition
authentication hijacking
infosphere mdm server
product information management
remote attackers
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
40.0%
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote attackers to hijack the authentication of arbitrary users.
Affected configurations
Node
ibminfosphere_master_data_management_collaboration_serverMatch10.0
ORibminfosphere_master_data_management_collaboration_serverMatch10.1
ORibminfosphere_master_data_management_collaboration_serverMatch11.0
ORibminfosphere_master_data_management_server_for_product_information_managementMatch9.0
ORibminfosphere_master_data_management_server_for_product_information_managementMatch9.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | infosphere_master_data_management_collaboration_server | 10.0 | cpe:2.3:a:ibm:infosphere_master_data_management_collaboration_server:10.0:*:*:*:*:*:*:* |
| ibm | infosphere_master_data_management_collaboration_server | 10.1 | cpe:2.3:a:ibm:infosphere_master_data_management_collaboration_server:10.1:*:*:*:*:*:*:* |
| ibm | infosphere_master_data_management_collaboration_server | 11.0 | cpe:2.3:a:ibm:infosphere_master_data_management_collaboration_server:11.0:*:*:*:*:*:*:* |
| ibm | infosphere_master_data_management_server_for_product_information_management | 9.0 | cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.0:*:*:*:*:*:*:* |
| ibm | infosphere_master_data_management_server_for_product_information_management | 9.1 | cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.1:*:*:*:*:*:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2014-02-04 05:39:00
nvd
nvd
CVE-2013-5427
2014-02-04 05:39:08
ibm
ibm
cvelist
cvelist
CVE-2013-5427
2014-02-04 02:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
40.0%
Related for CVE-2013-5427