CVEvulnerability

CVE-2014-8896

4.0 MEDIUM Published 2014-12-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-12-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-287

Description

The Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to modify the administrator's credentials and consequently gain privileges via unspecified vectors.

Affected configurations

• ibm infosphere master data management server for product information management 9.0.0 • ibm infosphere master data management server for product information management 9.0.0.1 • ibm infosphere master data management server for product information management 9.0.0.2 • ibm infosphere master data management server for product information management 9.0.0.3 • ibm infosphere master data management server for product information management 9.0.0.4 • ibm infosphere master data management server for product information management 9.0.0.5 • ibm infosphere master data management server for product information management 9.0.0.6 • ibm infosphere master data management server for product information management 9.0.0.7 • ibm infosphere master data management server for product information management 9.0.0.8 • ibm infosphere master data management server for product information management 9.1.0 • ibm infosphere master data management collaborative server 10.0.0 • ibm infosphere master data management collaborative server 10.0.0.1 • ibm infosphere master data management collaborative server 10.0.0.2 • ibm infosphere master data management collaborative server 10.0.0.3 • ibm infosphere master data management collaborative server 10.0.0.4 • ibm infosphere master data management collaborative server 10.0.0.5 • ibm infosphere master data management collaborative server 10.1.0 • ibm infosphere master data management collaborative server 11.0 • ibm infosphere master data management collaborative server 11.3 • ibm infosphere master data management collaborative server 11.4

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References