CVE-2014-0336: CSRF

Published Mar 6, 2014

Updated

Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the usernewmaster parameter to the adminconsole/ URI.

Affected Software

1 affected component

Serena Dimensions CM=12.2-build7.199.0

Event History

Mar 6, 2014

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Data Sourced

via NVD·11:55 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0336?

CVE-2014-0336 is classified as a medium severity vulnerability.

How do I fix CVE-2014-0336?

To fix CVE-2014-0336, upgrade Serena Dimensions CM to a patched version that addresses this CSRF vulnerability.

What types of attacks can exploit CVE-2014-0336?

CVE-2014-0336 can be exploited through cross-site request forgery attacks, allowing unauthorized actions on behalf of an authenticated user.

Who is affected by CVE-2014-0336?

CVE-2014-0336 affects users of Serena Dimensions CM version 12.2 build 7.199.0.

What happens if CVE-2014-0336 is exploited?

If exploited, CVE-2014-0336 can lead to unauthorized changes to administrator-level settings in the Serena Dimensions CM web client.