IBM InfoSphere Master Data Management Collaboration Server Multiple Remote Security Vulnerabilities

Bugtraq ID:	57886
Class:	Input Validation Error
CVE:	CVE-2013-0477 CVE-2013-0478
Remote:	Yes
Local:	No
Published:	Feb 11 2013 12:00AM
Updated:	Feb 11 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

IBM InfoSphere Master Data Management Collaboration Server Multiple Remote Security Vulnerabilities

IBM InfoSphere Master Data Management Collaboration Server is prone to multiple unspecified URI-redirection vulnerabilities and an unspecified cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input.

Attackers can exploit these issues to execute arbitrary script or HTML code, steal cookie-based authentication credentials, and conduct phishing attacks. Other attacks may also be possible.

IBM InfoSphere Master Data Management Collaboration Server 10.0 and 10.1 are vulnerable.

IBM InfoSphere Master Data Management Collaboration Server Multiple Remote Security Vulnerabilities

An attacker can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.

IBM InfoSphere Master Data Management Collaboration Server Multiple Remote Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM InfoSphere Master Data Management Collaboration Server Multiple Remote Security Vulnerabilities

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Multiple security vulnerabilities exist in IBM InfoSphere Mas (IBM)