CVE-2014-0929: CSRF
Published Jun 8, 2014
·Updated
Cross-site request forgery (CSRF) vulnerability in the Profiles component in IBM Connections through 3.0.1.1 CR3 allows remote authenticated users to hijack the authentication of arbitrary users for requests that trigger follow actions.
Affected Software
13 affected components
IBM Connections<=3.0.1.1
IBM Connections=1.0.0.0
IBM Connections=1.0.1.0
IBM Connections=1.0.2.0
IBM Connections=2.0.0.0
IBM Connections=2.0.1.0
IBM Connections=2.0.1.1
IBM Connections=2.5.0.0
IBM Connections=2.5.0.1
IBM Connections=2.5.0.2
IBM Connections=2.5.0.3
IBM Connections=3.0.0.0
IBM Connections=3.0.1.0
Event History
Jun 8, 2014
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
via NVD·11:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0929?
CVE-2014-0929 has a high severity rating due to its potential for cross-site request forgery.
2
How do I fix CVE-2014-0929?
To fix CVE-2014-0929, it is recommended to update to the latest version of IBM Connections that addresses this vulnerability.
3
What applications are affected by CVE-2014-0929?
CVE-2014-0929 affects multiple versions of IBM Connections up to 3.0.1.1 CR3.
4
Who can exploit the CVE-2014-0929 vulnerability?
Remote authenticated users can exploit CVE-2014-0929 to hijack the authentication of other users.
5
What type of vulnerability is CVE-2014-0929?
CVE-2014-0929 is classified as a cross-site request forgery (CSRF) vulnerability.