CVE-2014-0969

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-17 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users.

Affected products

IBM InfoSphere Master Data Management Collaboration Server: 10.0, 10.1, 11.0, 11.3
IBM Infosphere Master Data Management Server For Product Information Management: 9.0, 9.1, 10.0, 10.0.0.1, 10.0.1, 10.1 (+4)

References

http://secunia.com/advisories/60679
http://secunia.com/advisories/60693
http://secunia.com/advisories/60695
http://www-01.ibm.com/support/docview.wss?uid=swg21681649
http://www.securityfocus.com/bid/69262
https://exchange.xforce.ibmcloud.com/vulnerabilities/92885
http://secunia.com/advisories/60679
http://secunia.com/advisories/60693
http://secunia.com/advisories/60695
http://www-01.ibm.com/support/docview.wss?uid=swg21681649
http://www.securityfocus.com/bid/69262
https://exchange.xforce.ibmcloud.com/vulnerabilities/92885

Get alerted when CVE-2014-0969 or the next vulnerability affects your stack