CVE-2014-0888 IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vector...
MediumCVSS 4.9
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm worklight | = 5.0.0.0 | No fix listed |
| ibm worklight | = 5.0.0.1 | No fix listed |
| ibm worklight | = 5.0.0.2 | No fix listed |
| ibm worklight | = 5.0.0.3 | No fix listed |
| ibm worklight | = 5.0.5.0 | No fix listed |
| ibm worklight | = 5.0.5.1 | No fix listed |
| ibm worklight | = 5.0.6.0 | No fix listed |
| ibm worklight | = 5.0.6.1 | No fix listed |
| ibm worklight | = 5.0.6.2 | No fix listed |
| ibm worklight | = 6.0.0.0 | No fix listed |
| ibm worklight | = 6.0.0.1 | No fix listed |
| ibm worklight | = 6.0.0.2 | No fix listed |
| ibm worklight | = 6.1.0.0 | No fix listed |
| ibm worklight | = 6.1.0.1 | No fix listed |
| ibm mobile foundation | = 5.0.0.0 | No fix listed |
| ibm mobile foundation | = 5.0.0.1 | No fix listed |
| ibm mobile foundation | = 5.0.0.2 | No fix listed |
| ibm mobile foundation | = 5.0.0.3 | No fix listed |
| ibm mobile foundation | = 5.0.5.0 | No fix listed |
| ibm mobile foundation | = 5.0.5.1 | No fix listed |
| ibm mobile foundation | = 5.0.6.0 | No fix listed |
| ibm mobile foundation | = 5.0.6.1 | No fix listed |
| ibm mobile foundation | = 5.0.6.2 | No fix listed |
| ibm mobile foundation | = 6.0.0.0 | No fix listed |
| ibm mobile foundation | = 6.0.0.1 | No fix listed |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm mobile foundation | = 6.0.0.2 | No fix listed |
| ibm mobile foundation | = 6.1.0.0 | No fix listed |
| ibm mobile foundation | = 6.1.0.1 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- ibm-worklight-cve20140888-tamper(91239) vdb-entry