CVE-2014-6187

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-6187
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

6.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability : 6.8 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1IV26727
http://www.ibm.com/support/docview.wss?uid=swg21693379 Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21693381 Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21693384 Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21693387 Vendor Advisory
http://www.securityfocus.com/bid/71906
https://exchange.xforce.ibmcloud.com/vulnerabilities/98553
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:websphere_service_registry_and_repository:6.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:6.3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:6.3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:6.3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:6.3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.0.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.5.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:7.5.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:8.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_service_registry_and_repository:8.0.0.1:*:*:*:*:*:*:*
History

No history.

Information

Published : 2014-12-24 11:59

Updated : 2024-02-04 18:35

NVD link : CVE-2014-6187

Mitre link : CVE-2014-6187

CVE.ORG link : CVE-2014-6187

JSON object : View

Products Affected

ibm

  • websphere_service_registry_and_repository
CWE
CWE-352

Cross-Site Request Forgery (CSRF)