CVE-2014-0970: Input Validation
First published: Sat Jul 19 2014(Updated: )
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject links via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Infosphere Master Data Management Collaboration Server | =10.0 | |
| Ibm Infosphere Master Data Management Collaboration Server | =10.1 | |
| Ibm Infosphere Master Data Management Collaboration Server | =11.0 | |
| IBM InfoSphere Master Data Management Server for Product Information Management | =9.0 | |
| IBM InfoSphere Master Data Management Server for Product Information Management | =9.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-0970?
The severity of CVE-2014-0970 is classified as moderate due to the potential for remote authenticated users to inject malicious links.
How do I fix CVE-2014-0970?
To fix CVE-2014-0970, upgrade to IBM InfoSphere Master Data Management Collaborative Edition 11.0 FP4 or higher, or to a patched version of Master Data Management Server for Product Information Management.
Who is affected by CVE-2014-0970?
CVE-2014-0970 affects users of IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x and 11.x prior to FP4, and versions 9.0 and 9.1 of the InfoSphere Master Data Management Server for Product Information Management.
Can CVE-2014-0970 be exploited remotely?
Yes, CVE-2014-0970 can be exploited remotely by authenticated users to inject links through unspecified vectors.
What components are involved in CVE-2014-0970?
CVE-2014-0970 involves the GDS component of IBM InfoSphere Master Data Management.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/ibm
- canonical/ibm infosphere master data management collaboration server
- version/ibm infosphere master data management collaboration server/10.0
- version/ibm infosphere master data management collaboration server/10.1
- version/ibm infosphere master data management collaboration server/11.0
- canonical/ibm infosphere master data management server for product information management
- version/ibm infosphere master data management server for product information management/9.0
- version/ibm infosphere master data management server for product information management/9.1