CVE:CVE-2013-5427
CNNVD:CNNVD-201402-017
IBM InfoSphere Master Data Management Server for Product Information Management（IBM InfoSphere MDM Server for PIM）是美国IBM公司的一套企业产品信息管理解决方案。IBM InfoSphere Master Data Management（MDM） - Collaborative Edition是一套为产品信息管理（PIM）提供协同编辑的解决方案。
IBM InfoSphere MDM - Collaborative Edition 10.0和10.1版本及11.0版本和InfoSphere MDM Server for PIM 9.0和9.1版本中存在跨站请求伪造漏洞。远程攻击者可通过发送畸形的HTTP请求利用该漏洞执行未授权操作。
solution:Upgrade ibm infosphere_master_data_management_collaboration_server to a higher version than 10.0,10.1,11.0,and avoid the version 10.0,10.1,11.0; Upgrade ibm infosphere_master_data_management_server_for_product_information_management to a higher version than 9.0,9.1,and avoid the version 9.0,9.1