Vulnerability in Ibm Content_navigator

CVE-2014-0858

IBM Content Navigator 2.x before 2.0.2.2-ICN-FP002 allows remote authenticated users to bypass intended access restrictions and conduct deleteAction attacks via a modified URL.

EPSS: 0.001 (34.1th percentile) — read the EPSS interpretation.

Affected products

Ibm Content_navigator — versions 2.0.0, 2.0.1, 2.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
ibm-navigator-cve20140858-xss(90864) (vdb-entry, x_refsource_XF)