Lucene search

[email protected]CVE-2014-0936

HistoryJun 08, 2014 - 11:55 p.m.

CVE-2014-0936

2014-06-0823:55:00

CWE-310

CWE-264

[email protected]

web.nvd.nist.gov

ibm

security

appscan

source

8.0

9.0

cleartext

assessment

data

remote attackers

sensitive information

sniffing

network

cve-2014-0936

nvd

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:H/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

65.5%

JSON

IBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not properly restricted for the configured database server, transmits cleartext assessment data, which allows remote attackers to obtain sensitive information by sniffing the network.

CPENameOperatorVersion
ibm:security_appscan_sourceibm security appscan sourceeq8.5
ibm:security_appscan_sourceibm security appscan sourceeq8.7
ibm:security_appscan_sourceibm security appscan sourceeq9.0
ibm:security_appscan_sourceibm security appscan sourceeq8.6
ibm:security_appscan_sourceibm security appscan sourceeq8.8
ibm:security_appscan_sourceibm security appscan sourceeq8.0

CPE	Name	Operator	Version
ibm:security_appscan_source	ibm security appscan source	eq	8.5
ibm:security_appscan_source	ibm security appscan source	eq	8.7
ibm:security_appscan_source	ibm security appscan source	eq	9.0
ibm:security_appscan_source	ibm security appscan source	eq	8.6
ibm:security_appscan_source	ibm security appscan source	eq	8.8
ibm:security_appscan_source	ibm security appscan source	eq	8.0

References

www-01.ibm.com/support/docview.wss?uid=swg21674750

exchange.xforce.ibmcloud.com/vulnerabilities/92317

Social References

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:H/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

65.5%

JSON

Related for CVE-2014-0936

cvelist1 prion1