CVE-2014-0969
Beschrijving NL
Cross-site request forgery (CSRF) -kwetsbaarheid in de GDS-component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x en 11.x vóór 11.0-FP5 en InfoSphere Master Data Management Server voor Product Information Management 9.x tot en met 11.x vóór 11.3-IF2 stelt externe geverifieerde gebruikers in staat om de authenticatie van willekeurige gebruikers te kapen.
Origineel (Engels) tonen
Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users.