{"id": "CVE-2014-3055", "bulletinFamily": "NVD", "title": "CVE-2014-3055", "description": "SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", "published": "2014-07-29T20:55:00", "modified": "2017-08-29T01:34:00", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3055", "reporter": "cve@mitre.org", "references": ["https://exchange.xforce.ibmcloud.com/vulnerabilities/93529", "http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909", "http://www-01.ibm.com/support/docview.wss?uid=swg21677032", "http://secunia.com/advisories/60499"], "cvelist": ["CVE-2014-3055"], "type": "cve", "lastseen": "2019-05-29T18:13:45", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "34b87b5c90fd9a8dde0391e0739f9d72"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "74a4ee20308dcc4aa256a6a291141cf0"}, {"key": "cpe23", "hash": "efa43e4ce8b180683954a01d2ce9c3b5"}, {"key": "cvelist", "hash": "93865c189d4a3bb085de580973f82096"}, {"key": "cvss", "hash": "0b053db5674b87efff89989a8a720df3"}, {"key": "cvss2", "hash": "27c7580c75f8189a2ddd31c96c2f7e2b"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "4994f73f97fee1825d38aac7bee9aefe"}, {"key": "description", "hash": "1cb30579b5f709b8e619a9006bb5e6b5"}, {"key": "href", "hash": "ca3013247e86c0e8385e0660c75dbc7f"}, {"key": "modified", "hash": "ce64a65331d72a28fae4a3b656b4da92"}, {"key": "published", "hash": "476a14166400c19dd967d8ab34b8e960"}, {"key": "references", "hash": "f062af9008bedd40c301c325a3871b1a"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "3316517956ccc41c27c1efb19078c42d"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "f73799cf5061dd85eccefb418a25ffcf53947508a3c8504d1f1ac2d9574b3c5c", "viewCount": 0, "enchantments": {"score": {"value": 7.8, "vector": "NONE", "modified": "2019-05-29T18:13:45"}, "dependencies": {"references": [{"type": "nessus", "idList": ["WEBSPHERE_PORTAL_UTL_PORTLET_SWG21677032.NASL", "WEBSPHERE_PORTAL_SWG21677032.NASL"]}], "modified": "2019-05-29T18:13:45"}, "vulnersScore": 7.8}, "objectVersion": "1.3", "cpe": ["cpe:/a:ibm:websphere_portal:7.0.0.1", "cpe:/a:ibm:websphere_portal:7.0.0.2", "cpe:/a:ibm:websphere_portal:8.0.0.1", "cpe:/a:ibm:websphere_portal:8.0.0.0", "cpe:/a:ibm:websphere_portal_unified_task_list_portlet:6.0.1", "cpe:/a:ibm:websphere_portal:7.0.0.0"], "affectedSoftware": [{"name": "ibm websphere_portal", "operator": "eq", "version": "8.0.0.0"}, {"name": "ibm websphere_portal", "operator": "eq", "version": "7.0.0.1"}, {"name": "ibm websphere_portal", "operator": "eq", "version": "8.0.0.1"}, {"name": "ibm websphere_portal", "operator": "eq", "version": "7.0.0.2"}, {"name": "ibm websphere_portal", "operator": "eq", "version": "7.0.0.0"}, {"name": "ibm websphere_portal_unified_task_list_portlet", "operator": "eq", "version": "6.0.1"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf02:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf23:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf06:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf011:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf010:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf020:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf015:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf006:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:-:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf004:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf013:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf04:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf016:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf01:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf003:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf07:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf021:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf26:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf24:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf017:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf12:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf04:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal_unified_task_list_portlet:6.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf27:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf009:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf09:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf05:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf008:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.1:cf08:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf03:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf005:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf014:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf012:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf007:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:8.0.0.0:cf05:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf019:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf022:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf018:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.1:cf019:*:*:*:*:*:*", "cpe:2.3:a:ibm:websphere_portal:7.0.0.2:cf25:*:*:*:*:*:*"], "cwe": ["CWE-89"]}

{"nessus": [{"lastseen": "2019-11-03T12:38:43", "bulletinFamily": "scanner", "description": "The version of IBM WebSphere Portal on the remote host is affected by\nmultiple vulnerabilities in the Unified Task List (UTL) portlet :\n\n - An unspecified open redirect vulnerability exists that\n allows a remote attacker to perform a phishing attack\n by enticing a user to click a malicious URL.\n (CVE-2014-3054)\n\n - A SQL injection vulnerability exists that allows a\n remote attacker who is a trusted user to manipulate or\n inject SQL queries into the back-end database.\n (CVE-2014-3055)\n\n - An information disclosure vulnerability exists that\n allows remote attackers to view environment variables\n and certain JAR files along with the versions.\n (CVE-2014-3056)\n\n - A cross-site scripting vulnerability exists that allows\n a remote attacker to execute arbitrary code in a user", "modified": "2019-11-02T00:00:00", "id": "WEBSPHERE_PORTAL_SWG21677032.NASL", "href": "https://www.tenable.com/plugins/nessus/77541", "published": "2014-09-05T00:00:00", "title": "IBM WebSphere Portal 8.0.0.x Unified Task List Portlet Multiple Vulnerabilities (PI18909)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(77541);\n script_version(\"1.6\");\n script_cvs_date(\"Date: 2018/08/06 14:03:14\");\n\n script_cve_id(\n \"CVE-2014-3054\",\n \"CVE-2014-3055\",\n \"CVE-2014-3056\",\n \"CVE-2014-3057\"\n );\n script_bugtraq_id(68924, 68925, 68928, 68929);\n\n script_name(english:\"IBM WebSphere Portal 8.0.0.x Unified Task List Portlet Multiple Vulnerabilities (PI18909)\");\n script_summary(english:\"Checks for an installed patch.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host has web portal software installed that is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of IBM WebSphere Portal on the remote host is affected by\nmultiple vulnerabilities in the Unified Task List (UTL) portlet :\n\n - An unspecified open redirect vulnerability exists that\n allows a remote attacker to perform a phishing attack\n by enticing a user to click a malicious URL.\n (CVE-2014-3054)\n\n - A SQL injection vulnerability exists that allows a\n remote attacker who is a trusted user to manipulate or\n inject SQL queries into the back-end database.\n (CVE-2014-3055)\n\n - An information disclosure vulnerability exists that\n allows remote attackers to view environment variables\n and certain JAR files along with the versions.\n (CVE-2014-3056)\n\n - A cross-site scripting vulnerability exists that allows\n a remote attacker to execute arbitrary code in a user's\n browser. (CVE-2014-3057)\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www-01.ibm.com/support/docview.wss?uid=swg21677032\");\n # https://www.ibm.com/blogs/psirt/ibm-security-bulletin-fixes-available-for-security-vulnerabilities-in-ibm-websphere-portal-related-to-unified-task-list-utl-portlet-cve-2014-3054-cve-2014-3055-cve-2014-3056-cve-2014-3057/\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?77124e50\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to 8.0.0.1 CF12 (PI14791) and then apply Interim Fix PI18909\nor 8.0.0.1 CF13 (PI17735) or apply the workaround. Refer to IBM's\nadvisory for more information.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_cvss3_base_vector(\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\");\n script_set_cvss3_temporal_vector(\"CVSS:3.0/E:U/RL:O/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No exploit is required\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n script_cwe_id(20, 74, 79, 442, 629, 711, 712, 722, 725, 750, 751, 800, 801, 809, 811, 864, 900, 928, 931, 990);\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/06/30\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/07/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/09/05\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:ibm:websphere_portal\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"CGI abuses\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"websphere_portal_installed.nbin\");\n script_require_keys(\"installed_sw/IBM WebSphere Portal\");\n script_require_ports(139, 445);\n exit(0);\n}\n\ninclude(\"websphere_portal_version.inc\");\n\nportlets = make_array();\n\npaa = \"Unified Task List (UTL)\";\nportlets[paa][\"Cell File\"] = \"\\PA_WPF.ear\\unifiedtasklist.war\\utl-version.properties\";\nportlets[paa][\"WP Ranges\"] = make_list(\"8.0.0.0, 8.0.0.1\");\n\nwebsphere_portal_check_version(\n ranges:make_list(\"8.0.0.0, 8.0.0.1, CF12\"),\n fix:\"PI14791\",\n portlets:portlets,\n req_vuln_portlets:make_list(paa),\n severity:SECURITY_HOLE,\n sqli:TRUE,\n xss: TRUE\n);\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-11-03T12:38:43", "bulletinFamily": "scanner", "description": "The version of IBM WebSphere Portal on the remote host is affected by\nmultiple vulnerabilities in the Unified Task List (UTL) portlet :\n\n - An unspecified open redirect vulnerability exists that\n allows a remote attacker to perform a phishing attack\n by enticing a user to click a malicious URL.\n (CVE-2014-3054)\n\n - A SQL injection vulnerability exists that allows a\n remote attacker who is a trusted user to manipulate or\n inject SQL queries into the back-end database.\n (CVE-2014-3055)\n\n - An information disclosure vulnerability exists that\n allows remote attackers to view environment variables\n and certain JAR files along with the versions.\n (CVE-2014-3056)\n\n - A cross-site scripting vulnerability exists that allows\n a remote attacker to execute arbitrary code in a user", "modified": "2019-11-02T00:00:00", "id": "WEBSPHERE_PORTAL_UTL_PORTLET_SWG21677032.NASL", "href": "https://www.tenable.com/plugins/nessus/77542", "published": "2014-09-05T00:00:00", "title": "IBM WebSphere Portal 7.0.0.x Unified Task List Portlet < 6.0.1 Multiple Vulnerabilities (PI18909)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(77542);\n script_version(\"1.4\");\n script_cvs_date(\"Date: 2018/08/06 14:03:16\");\n\n script_cve_id(\n \"CVE-2014-3054\",\n \"CVE-2014-3055\",\n \"CVE-2014-3056\",\n \"CVE-2014-3057\"\n );\n script_bugtraq_id(68924, 68925, 68928, 68929);\n\n script_name(english:\"IBM WebSphere Portal 7.0.0.x Unified Task List Portlet < 6.0.1 Multiple Vulnerabilities (PI18909)\");\n script_summary(english:\"Checks for installed portlet.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote Windows host has web portal software installed that is\naffected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of IBM WebSphere Portal on the remote host is affected by\nmultiple vulnerabilities in the Unified Task List (UTL) portlet :\n\n - An unspecified open redirect vulnerability exists that\n allows a remote attacker to perform a phishing attack\n by enticing a user to click a malicious URL.\n (CVE-2014-3054)\n\n - A SQL injection vulnerability exists that allows a\n remote attacker who is a trusted user to manipulate or\n inject SQL queries into the back-end database.\n (CVE-2014-3055)\n\n - An information disclosure vulnerability exists that\n allows remote attackers to view environment variables\n and certain JAR files along with the versions.\n (CVE-2014-3056)\n\n - A cross-site scripting vulnerability exists that allows\n a remote attacker to execute arbitrary code in a user's\n browser. (CVE-2014-3057)\");\n\n script_set_attribute(attribute:\"see_also\", value:\"http://www-01.ibm.com/support/docview.wss?uid=swg21677032\");\n # https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_fixes_available_for_security_vulnerabilities_in_ibm_websphere_portal_related_to_unified_task_list_utl_portlet_cve_2014_3054_cve_2014_3055_cve_2014_3056_cve_2014_3057?lang=en_us\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?cc07a8d4\");\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Unified Task List portlet 6.0.1 or later. Refer to IBM's\nadvisory for more information.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n script_cwe_id(20, 74, 79, 442, 629, 711, 712, 722, 725, 750, 751, 800, 801, 809, 811, 864, 900, 928, 931, 990);\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/06/30\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/07/30\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/09/05\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:ibm:websphere_portal\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"websphere_portal_installed.nbin\");\n script_require_keys(\"installed_sw/IBM WebSphere Portal\");\n script_require_ports(139, 445);\n exit(0);\n}\n\ninclude(\"websphere_portal_version.inc\");\n\npaa_ver = UNKNOWN_VER;\npaa_fix = \"6.0.1\";\n\npaa = \"Unified Task List\";\nportlets[paa][\"Fixed Version\"] = \"6.0.1\";\nportlets[paa][\"File\"] = \"\\..\\paa\\unifiedtasklist\\components\\unifiedtasklist\\version\\checklists.common.component\";\nportlets[paa][\"Version Regex\"] = 'spec-version=\"([0-9\\\\.]+)\"\\\\s*/>';\nportlets[paa][\"WP Ranges\"] = make_list(\"7.0.0.0, 7.0.0.2\");\n\n\nwebsphere_portal_check_version(\n portlets:portlets,\n severity:SECURITY_HOLE,\n xss :TRUE,\n sqli :TRUE\n);\n", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}]}