NVD

Id
29770  
Name
CVE-2014-0944  
Description
Cross-site request forgery (CSRF) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-05-09  
Modified Date
2014-05-09  
Seq
2014-0944  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157270 29770 CVE-2014-0944 http://www-01.ibm.com/support/docview.wss?uid=swg21671324  View
157271 29770 CVE-2014-0944 ibm-odm-cve20140944-csrf(92559)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13574 JVNDB-2014-002449 IBM Operational Decision Manager の Rule Execution Server の Rule Execution Server コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 IBM Operational Decision Manager の Rule Execution Server の Rule Execution Server コンソールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-0944 68345 CVE-2014-0944 29770 6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002449.html 2014-04-30 2014-05-12 View