CVE-2015-1980: Input Validation

Published Jul 20, 2015

Updated

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.

Affected Software

5 affected components

IBM InfoSphere Master Data Management=9.1

IBM InfoSphere Master Data Management=10.1

IBM InfoSphere Master Data Management=11.0

IBM InfoSphere Master Data Management=11.3

IBM InfoSphere Master Data Management=11.4

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21960244

Event History

Jul 20, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1980?

CVE-2015-1980 has a medium severity level as it allows remote authenticated users to conduct clickjacking attacks which may compromise user interactions.

How do I fix CVE-2015-1980?

To fix CVE-2015-1980, upgrade IBM InfoSphere Master Data Management to version 11.4 FP03 or later.

What types of attacks can be performed using CVE-2015-1980?

CVE-2015-1980 can be exploited to perform clickjacking attacks, tricking users into performing unintended actions.

Which software versions are affected by CVE-2015-1980?

CVE-2015-1980 affects IBM InfoSphere Master Data Management versions 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03.

Who is at risk from CVE-2015-1980?

Remote authenticated users of the affected versions of IBM InfoSphere Master Data Management are at risk from CVE-2015-1980.