Unscored severity · published May 16, 2014
CVE-2014-0933
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
II
Infosphere Information Server Metadata Workbench · Ibm
8.1.0; 8.1.0.1; 8.1.0.2; 8.1.1; 8.5.0; 8.5.0.1; +7 more · source: NVD
Affected product
II
Infosphere Information Server Metadata Workbench
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0933
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0933
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1JR49605
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21671141
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/92273
More from Infosphere Information Server Metadata Workbench
7.1
CVE-2018-1845
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data