CVE-2014-0929: CSRF
First published: Sun Jun 08 2014(Updated: )
Cross-site request forgery (CSRF) vulnerability in the Profiles component in IBM Connections through 3.0.1.1 CR3 allows remote authenticated users to hijack the authentication of arbitrary users for requests that trigger follow actions.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HCL Connections | <=3.0.1.1 | |
| HCL Connections | =1.0.0.0 | |
| HCL Connections | =1.0.1.0 | |
| HCL Connections | =1.0.2.0 | |
| HCL Connections | =2.0.0.0 | |
| HCL Connections | =2.0.1.0 | |
| HCL Connections | =2.0.1.1 | |
| HCL Connections | =2.5.0.0 | |
| HCL Connections | =2.5.0.1 | |
| HCL Connections | =2.5.0.2 | |
| HCL Connections | =2.5.0.3 | |
| HCL Connections | =3.0.0.0 | |
| HCL Connections | =3.0.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-0929?
CVE-2014-0929 has a high severity rating due to its potential for cross-site request forgery.
How do I fix CVE-2014-0929?
To fix CVE-2014-0929, it is recommended to update to the latest version of IBM Connections that addresses this vulnerability.
What applications are affected by CVE-2014-0929?
CVE-2014-0929 affects multiple versions of IBM Connections up to 3.0.1.1 CR3.
Who can exploit the CVE-2014-0929 vulnerability?
Remote authenticated users can exploit CVE-2014-0929 to hijack the authentication of other users.
What type of vulnerability is CVE-2014-0929?
CVE-2014-0929 is classified as a cross-site request forgery (CSRF) vulnerability.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/weakness
- agent/tags
- agent/source
- vendor/ibm
- canonical/hcl connections
- version/hcl connections/3.0.1.1
- version/hcl connections/1.0.0.0
- version/hcl connections/1.0.1.0
- version/hcl connections/1.0.2.0
- version/hcl connections/2.0.0.0
- version/hcl connections/2.0.1.0
- version/hcl connections/2.0.1.1
- version/hcl connections/2.5.0.0
- version/hcl connections/2.5.0.1
- version/hcl connections/2.5.0.2
- version/hcl connections/2.5.0.3
- version/hcl connections/3.0.0.0
- version/hcl connections/3.0.1.0