CVEvulnerability

CVE-2014-4789

6.8 MEDIUM Published 2014-09-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-09-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-384

Description

Session fixation vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote attackers to hijack web sessions via unspecified vectors.

Affected configurations

• ibm initiate master data service 9.5 • ibm initiate master data service 9.7 • ibm initiate master data service 10.0 • ibm initiate master data service 10.1

Related

Weakness · CWE (1)

  • CWE-384 Session Fixation weakness

References