Lucene search
HistoryAug 29, 2014 - 10:00 a.m.
CVE-2014-0888
ibm
worklight
foundation
authentication bypass
cve-2014-0888
nvd
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
33.0%
IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors.
Affected configurations
Node
ibmworklightMatch5.0.0.0consumer
ORibmworklightMatch5.0.0.0enterprise
ORibmworklightMatch5.0.0.1consumer
ORibmworklightMatch5.0.0.1enterprise
ORibmworklightMatch5.0.0.2consumer
ORibmworklightMatch5.0.0.2enterprise
ORibmworklightMatch5.0.0.3consumer
ORibmworklightMatch5.0.0.3enterprise
ORibmworklightMatch5.0.5.0consumer
ORibmworklightMatch5.0.5.0enterprise
ORibmworklightMatch5.0.5.1consumer
ORibmworklightMatch5.0.5.1enterprise
ORibmworklightMatch5.0.6.0consumer
ORibmworklightMatch5.0.6.0enterprise
ORibmworklightMatch5.0.6.1consumer
ORibmworklightMatch5.0.6.1enterprise
ORibmworklightMatch5.0.6.2consumer
ORibmworklightMatch5.0.6.2enterprise
ORibmworklightMatch6.0.0.0consumer
ORibmworklightMatch6.0.0.0enterprise
ORibmworklightMatch6.0.0.1consumer
ORibmworklightMatch6.0.0.1enterprise
ORibmworklightMatch6.0.0.2consumer
ORibmworklightMatch6.0.0.2enterprise
ORibmworklightMatch6.1.0.0consumer
ORibmworklightMatch6.1.0.0enterprise
ORibmworklightMatch6.1.0.1consumer
ORibmworklightMatch6.1.0.1enterprise
Node
ibmmobile_foundationMatch5.0.0.0
ORibmmobile_foundationMatch5.0.0.1
ORibmmobile_foundationMatch5.0.0.2
ORibmmobile_foundationMatch5.0.0.3
ORibmmobile_foundationMatch5.0.5.0
ORibmmobile_foundationMatch5.0.5.1
ORibmmobile_foundationMatch5.0.6.0
ORibmmobile_foundationMatch5.0.6.1
ORibmmobile_foundationMatch5.0.6.2
ORibmmobile_foundationMatch6.0.0.0
ORibmmobile_foundationMatch6.0.0.1
ORibmmobile_foundationMatch6.0.0.2
ORibmmobile_foundationMatch6.1.0.0
ORibmmobile_foundationMatch6.1.0.1
Related
prion
prion
Authentication flaw
2014-08-29 09:55:00
cvelist
cvelist
CVE-2014-0888
2014-08-29 10:00:00
nvd
nvd
CVE-2014-0888
2014-08-29 09:55:07
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
33.0%
Related for CVE-2014-0888