IBM Security Bulletin: IBM InfoSphere Master Data Management is vulnerable to a Insecure JSF ViewState found in MDM User Interface (CVE-2016-9714)
IBM InfoSphere Master Data Management is vulnerable to a Insecure JSF ViewState found in MDM Busines Admin User Interface which could allow an attacker to execute malicious and unauthorized actions.
CVE(s): CVE-2016-9714
Affected product(s) and affected version(s):
This vulnerability is known to affect the following offerings:
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2v6awNo
X-Force Database: http://ift.tt/2tJSxsL
The post IBM Security Bulletin: IBM InfoSphere Master Data Management is vulnerable to a Insecure JSF ViewState found in MDM User Interface (CVE-2016-9714) appeared first on IBM PSIRT Blog.
| Affected IBM InfoSphere Master Data Management Server | Affected Versions |
| IBM InfoSphere Master Data Management | 10.1 |
| IBM InfoSphere Master Data Management | 11.0 |
| IBM InfoSphere Master Data Management | 11.3 |
| IBM InfoSphere Master Data Management | 11.4 |
| IBM InfoSphere Master Data Management | 11.5 |
| IBM InfoSphere Master Data Management | 11.6 |
from IBM Product Security Incident Response Team http://ift.tt/2v5WJXa