Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x prior to 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x up to and including 11.x prior to 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm infosphere master data management server for product information management 10.1.0.2 |
||
ibm infosphere master data management server for product information management 11.0 |
||
ibm infosphere master data management 11.0 |
||
ibm infosphere master data management server for product information management 10.0 |
||
ibm infosphere master data management server for product information management 10.0.0.1 |
||
ibm infosphere master data management server for product information management 9.1 |
||
ibm infosphere master data management 11.3 |
||
ibm infosphere master data management server for product information management 10.0.1 |
||
ibm infosphere master data management server for product information management 10.1 |
||
ibm infosphere master data management server for product information management 10.1.0.1 |
||
ibm infosphere master data management 10.0 |
||
ibm infosphere master data management 10.1 |
||
ibm infosphere master data management server for product information management 11.3 |
||
ibm infosphere master data management server for product information management 9.0 |
Vulmon