CVE-2014-0925: Low severity IBM Sterling Control Center vulnerability

Published May 30, 2014

Updated

Open redirect vulnerability in IBM Sterling Control Center 5.4.0 before 5.4.0.1 iFix 3 and 5.4.1 before 5.4.1.0 iFix 2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.

Affected Software

3 affected components

IBM Sterling Control Center=5.4.0

IBM Sterling Control Center=5.4.0.1

IBM Sterling Control Center=5.4.1.0

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21673004

Event History

May 30, 2014

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

via NVD·09:55 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0925?

CVE-2014-0925 is classified as a medium severity vulnerability due to its potential for phishing attacks.

How do I fix CVE-2014-0925?

To fix CVE-2014-0925, upgrade IBM Sterling Control Center to version 5.4.0.1 iFix 3 or later, or 5.4.1.0 iFix 2 or later.

Who is affected by CVE-2014-0925?

CVE-2014-0925 affects users of IBM Sterling Control Center versions 5.4.0 through 5.4.1.0.

What type of attack can CVE-2014-0925 facilitate?

CVE-2014-0925 can facilitate phishing attacks by allowing attackers to redirect users to arbitrary websites.

Is CVE-2014-0925 a remote vulnerability?

Yes, CVE-2014-0925 is a remote vulnerability that requires authentication to exploit.