VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 6, 2014· Updated Jun 17, 2026

CVE-2014-0336

CVE-2014-0336

Description

Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the user_new_master parameter to the adminconsole/ URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Serena/Dimensions Cm2 versions
    cpe:2.3:a:serena:dimensions_cm:12.2:build7.199.0:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:serena:dimensions_cm:12.2:build7.199.0:*:*:*:*:*:*
    • (no CPE)range: =12.2 build 7.199.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.