CVEvulnerability
CVE-2014-6214
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-03-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF15 and 8.5.0 before CF05 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Affected configurations
• ibm websphere portal 8.0.0.0
• ibm websphere portal 8.0.0.1
• ibm websphere portal 8.5.0.0
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI34987 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21697213 Patch, Vendor Advisory
- http://www.securitytracker.com/id/1031880 www.securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI34987 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21697213 Patch, Vendor Advisory
- http://www.securitytracker.com/id/1031880 www.securitytracker.com