Unrated severityNVD Advisory· Published Mar 6, 2014· Updated May 6, 2026
CVE-2014-0336
CVE-2014-0336
Description
Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the user_new_master parameter to the adminconsole/ URI.
Affected products
1- cpe:2.3:a:serena:dimensions_cm:12.2:build7.199.0:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.kb.cert.org/vuls/id/823452nvdUS Government Resource
News mentions
0No linked articles in our index yet.