Lucene search

K
cve[email protected]CVE-2014-0886
HistoryMar 25, 2014 - 8:55 p.m.

CVE-2014-0886

2014-03-2520:55:00
CWE-78
web.nvd.nist.gov
19
cve-2014-0886
ibm lotus protector
mail security
remote authentication
access restrictions
arbitrary commands
security vulnerability
nvd

7.1 High

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.3%

The Admin Web UI in IBM Lotus Protector for Mail Security 2.8.x before 2.8.1-22905 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands via unspecified vectors.

7.1 High

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

0.011 Low

EPSS

Percentile

84.3%

Related for CVE-2014-0886