CVE-2014-4784 | BDVDB-2026-63849 Detail

Description#

IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not properly restrict use of FRAME elements, which allows remote attackers to conduct phishing attacks, and bypass intended access restrictions or obtain sensitive information, via a crafted web site, related to a "frame injection" issue.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/95031
http://www-01.ibm.com/support/docview.wss?uid=swg21682450
http://secunia.com/advisories/60996
http://www.securityfocus.com/bid/69698

Exploit#

No public exploit known

History#

Version 12014-09-10Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.