« Volver al listado

CVE-2014-0873

Estado: ModificadaMedia (6.8)—

Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management (MDM) Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.15 allow remote attackers to hijack the authentication of arbitrary users.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Infosphere Master Data Management Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-0873",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-03-16T14:06:45.193",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21666462",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90994",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21666462",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90994",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management (MDM) Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.15 allow remote attackers to hijack the authentication of arbitrary users."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de CSRF en las interfaces (1) Data Stewardship, (2) Business Admin y (3) Product en el servidor de IBM InfoSphere Master Data Management (MDM) 8.5 anterior a 8.5.0.82, 9.0.1 anterior a 9.0.1.38, 9.0.2 anterior a 9.0.2.35, 10.0 anterior a 10.0.0.0.26 y 10.1 anterior a 10.1.0.0.15 permiten a atacantes remotos secuestrar la autenticación de usuarios arbitrarios."
    }
  ],
  "lastModified": "2026-06-17T00:03:47.643",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server:8.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D8A8904-AB69-4DAE-B840-973BEAB95E3F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server:9.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6806874E-B69D-4BEF-9815-A9744C4B1757"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server:9.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5534816-7062-4D6A-B296-618F6407C2CD"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F63F3246-E93E-4AFE-9E95-A27180A3B8B4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server:10.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B176246A-FFAD-46E5-ACED-144925A35CFE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}