Lucene search

[email protected]CVE-2014-0958

HistoryMay 22, 2014 - 11:14 a.m.

CVE-2014-0958

2014-05-2211:14:14

[email protected]

web.nvd.nist.gov

cve

2014

0958

ibm websphere portal

open redirect vulnerability

remote attackers

phishing attacks

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.1%

JSON

Open redirect vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected configurations

NVD

Node

ibmwebsphere_portalMatch6.1.0.0

ibmwebsphere_portalMatch6.1.0.1

ibmwebsphere_portalMatch6.1.0.2

ibmwebsphere_portalMatch6.1.0.3

ibmwebsphere_portalMatch6.1.0.4

ibmwebsphere_portalMatch6.1.0.5

ibmwebsphere_portalMatch6.1.0.6

ibmwebsphere_portalMatch6.1.0.6cf27

ibmwebsphere_portalMatch6.1.5.0

ibmwebsphere_portalMatch6.1.5.1

ibmwebsphere_portalMatch6.1.5.2

ibmwebsphere_portalMatch6.1.5.3

ibmwebsphere_portalMatch6.1.5.3cf27

ibmwebsphere_portalMatch7.0.0.0

ibmwebsphere_portalMatch7.0.0.0cf001

ibmwebsphere_portalMatch7.0.0.1

ibmwebsphere_portalMatch7.0.0.1cf002

ibmwebsphere_portalMatch7.0.0.1cf003

ibmwebsphere_portalMatch7.0.0.1cf004

ibmwebsphere_portalMatch7.0.0.1cf005

ibmwebsphere_portalMatch7.0.0.1cf006

ibmwebsphere_portalMatch7.0.0.1cf007

ibmwebsphere_portalMatch7.0.0.1cf008

ibmwebsphere_portalMatch7.0.0.1cf009

ibmwebsphere_portalMatch7.0.0.1cf010

ibmwebsphere_portalMatch7.0.0.1cf019

ibmwebsphere_portalMatch7.0.0.2

ibmwebsphere_portalMatch7.0.0.2cf011

ibmwebsphere_portalMatch7.0.0.2cf012

ibmwebsphere_portalMatch7.0.0.2cf013

ibmwebsphere_portalMatch7.0.0.2cf014

ibmwebsphere_portalMatch7.0.0.2cf015

ibmwebsphere_portalMatch7.0.0.2cf016

ibmwebsphere_portalMatch7.0.0.2cf017

ibmwebsphere_portalMatch7.0.0.2cf018

ibmwebsphere_portalMatch7.0.0.2cf019

ibmwebsphere_portalMatch7.0.0.2cf020

ibmwebsphere_portalMatch7.0.0.2cf021

ibmwebsphere_portalMatch7.0.0.2cf022

ibmwebsphere_portalMatch7.0.0.2cf23

ibmwebsphere_portalMatch7.0.0.2cf24

ibmwebsphere_portalMatch7.0.0.2cf25

ibmwebsphere_portalMatch7.0.0.2cf26

ibmwebsphere_portalMatch7.0.0.2cf27

ibmwebsphere_portalMatch8.0.0.0

ibmwebsphere_portalMatch8.0.0.0cf01

ibmwebsphere_portalMatch8.0.0.0cf02

ibmwebsphere_portalMatch8.0.0.0cf03

ibmwebsphere_portalMatch8.0.0.0cf04

ibmwebsphere_portalMatch8.0.0.0cf05

ibmwebsphere_portalMatch8.0.0.1

ibmwebsphere_portalMatch8.0.0.1cf04

ibmwebsphere_portalMatch8.0.0.1cf05

ibmwebsphere_portalMatch8.0.0.1cf07

ibmwebsphere_portalMatch8.0.0.1cf08

ibmwebsphere_portalMatch8.0.0.1cf09

ibmwebsphere_portalMatch8.0.0.1cf10

ibmwebsphere_portalMatch8.0.0.1cf11

ibmwebsphere_portalMatch8.0.0.1cf12

CPENameOperatorVersion
ibm:websphere_portalibm websphere portaleq6.1.0.0
ibm:websphere_portalibm websphere portaleq6.1.0.1
ibm:websphere_portalibm websphere portaleq6.1.0.2
ibm:websphere_portalibm websphere portaleq6.1.0.3
ibm:websphere_portalibm websphere portaleq6.1.0.4
ibm:websphere_portalibm websphere portaleq6.1.0.5
ibm:websphere_portalibm websphere portaleq6.1.0.6
ibm:websphere_portalibm websphere portaleq6.1.5.0
ibm:websphere_portalibm websphere portaleq6.1.5.1
ibm:websphere_portalibm websphere portaleq6.1.5.2

CPE	Name	Operator	Version
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.0
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.1
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.2
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.3
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.4
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.5
ibm:websphere_portal	ibm websphere portal	eq	6.1.0.6
ibm:websphere_portal	ibm websphere portal	eq	6.1.5.0
ibm:websphere_portal	ibm websphere portal	eq	6.1.5.1
ibm:websphere_portal	ibm websphere portal	eq	6.1.5.2

Rows per page:

1-10 of 161

References

www-01.ibm.com/support/docview.wss?uid=swg1PI15689

www-01.ibm.com/support/docview.wss?uid=swg21672572

exchange.xforce.ibmcloud.com/vulnerabilities/92739

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.1%

JSON

Related for CVE-2014-0958

nessus3 cvelist1 nvd1 prion1