Lucene search

IbmCVE-2014-3048

HistoryJun 08, 2014 - 11:55 p.m.

CVE-2014-3048

2014-06-0823:55:02

ibm

web.nvd.nist.gov

ibm

system

storage

virtualization

ts7700

vulnerability

local users

privileges

tssc

ssh

command

nvd

cve-2014-3048

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Unspecified vulnerability on the IBM System Storage Virtualization Engine TS7700 allows local users to gain privileges by leveraging the TSSC service-user role to enter a crafted SSH command.

Affected configurations

Nvd

Node

ibmsystem_storage_virtualization_engine_ts7700_firmwareMatch-

AND

ibmsystem_storage_virtualization_engine_ts7700Match-

VendorProductVersionCPE
ibmsystem_storage_virtualization_engine_ts7700_firmware-cpe:2.3:o:ibm:system_storage_virtualization_engine_ts7700_firmware:-:*:*:*:*:*:*:*
ibmsystem_storage_virtualization_engine_ts7700-cpe:2.3:h:ibm:system_storage_virtualization_engine_ts7700:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	system_storage_virtualization_engine_ts7700_firmware	-	cpe:2.3:o:ibm:system_storage_virtualization_engine_ts7700_firmware:-:::::::*
ibm	system_storage_virtualization_engine_ts7700	-	cpe:2.3:h:ibm:system_storage_virtualization_engine_ts7700:-:::::::*

References

www-01.ibm.com/support/docview.wss?uid=ssg1S1004653

www.securityfocus.com/bid/67942

exchange.xforce.ibmcloud.com/vulnerabilities/93434

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:H/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2014-3048