Lucene search
IbmCVE-2014-0944HistoryMay 09, 2014 - 10:50 a.m.
CVE-2014-0944
2014-05-0910:50:25
CWE-352
ibm
web.nvd.nist.gov
20
cve-2014-0944
csrf
vulnerability
res console
ibm operational decision manager
xss sequences
nvd
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
46.8%
Cross-site request forgery (CSRF) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Affected configurations
Node
ibmoperational_decision_managerMatch7.5
ORibmoperational_decision_managerMatch8.0
ORibmoperational_decision_managerMatch8.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | operational_decision_manager | 7.5 | cpe:2.3:a:ibm:operational_decision_manager:7.5:*:*:*:*:*:*:* |
| ibm | operational_decision_manager | 8.0 | cpe:2.3:a:ibm:operational_decision_manager:8.0:*:*:*:*:*:*:* |
| ibm | operational_decision_manager | 8.5 | cpe:2.3:a:ibm:operational_decision_manager:8.5:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-0944
2014-05-09 10:00:00
prion
prion
Cross site request forgery (csrf)
2014-05-09 10:50:00
nvd
nvd
CVE-2014-0944
2014-05-09 10:50:25
ibm
ibm
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
46.8%
Related for CVE-2014-0944