CVE-2014-4775 — IBM Infosphere Master Data Management vulnerability

CWE-2553 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.2%
top 54.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Infosphere Master Data ManagementIBM Infosphere Master Data Management Server FOR Product Information Management
Timeline
PublishedAug 17
Latest updateMay 17

Description

IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 do not properly protect credentials, which allows remote attackers to obtain sensitive information via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-959q-xf8m-8362: IBM InfoSphere Master Data Management - Collaborative Edition 10↗2022-05-17
▶
CVEList
CVE-2014-4775: IBM InfoSphere Master Data Management - Collaborative Edition 10↗2014-08-17
▶
CVE-2014-4775 — IBM vulnerability | cvebase