PT-2016-3640 · Ibm · Ibm Infosphere Master Data Management - Collaborative Edition

Publicado 2016-01-17 · Atualizado 2016-01-20 · CVE-2015-4960

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 9.1 through 11.0 before 11.0.0.0 IF11 IBM InfoSphere Master Data Management - Collaborative Edition version 11.3 before 11.3.0.0 IF7 IBM InfoSphere Master Data Management - Collaborative Edition version 11.4 before 11.4.0.4 IF1

Description The issue allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

Recommendations For versions 9.1 through 11.0 before 11.0.0.0 IF11, update to version 11.0.0.0 IF11 or later. For version 11.3 before 11.3.0.0 IF7, update to version 11.3.0.0 IF7 or later. For version 11.4 before 11.4.0.4 IF1, update to version 11.4.0.4 IF1 or later.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2015-4960

Produtos afetados

Ibm Infosphere Master Data Management - Collaborative Edition

Referências · 2

• http://www-01.ibm.com/support/docview.wss?uid=swg21971545 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-4960 · Nota de Segurança