Security Bulletin: IBM InfoSphere Optim Workload Replay Cross Site Scripting Vulnerability (CVE-2014-0827)

Summary

An attacker can trick a user into inserting a mal-formed URL address into a browser or clicking on a mal-formed URL link and exploit a cross-site scripting vulnerability to gain unauthorized access or collect sensitive information.

Vulnerability Details

CVE ID:CVE-2014-0827

CVSS:

CVSS Base Score: 4.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/90503 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Affected Products and Versions

IBM® InfoSphere® Optim™ Workload Replay v1.1

Remediation/Fixes

Upgrade to InfoSphere Workload Replay v2.1. To download InfoSphere Workload Replay v2.1 review the download instructions.

Workarounds and Mitigations

None known