Lucene search

[email protected]CVE-2014-6122

HistoryDec 23, 2014 - 2:59 a.m.

CVE-2014-6122

2014-12-2302:59:02

CWE-264

[email protected]

web.nvd.nist.gov

cve-2014-6122

ibm

security

appscan

enterprise

remote

authenticated

arbitrary

commands

nvd

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.4%

JSON

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote authenticated users to write to arbitrary folders, and consequently execute arbitrary commands, via a modified argument.

Affected configurations

NVD

Node

ibmsecurity_appscanMatch8.5enterprise

ibmsecurity_appscanMatch8.6enterprise

ibmsecurity_appscanMatch8.7enterprise

ibmsecurity_appscanMatch8.8enterprise

ibmsecurity_appscanMatch9.0enterprise

ibmsecurity_appscanMatch9.0.0.1enterprise

ibmsecurity_appscan_sourceMatch9.0.1enterprise

CPENameOperatorVersion
ibm:security_appscanibm security appscaneq8.5
ibm:security_appscanibm security appscaneq8.6
ibm:security_appscanibm security appscaneq8.7
ibm:security_appscanibm security appscaneq8.8
ibm:security_appscanibm security appscaneq9.0
ibm:security_appscanibm security appscaneq9.0.0.1
ibm:security_appscan_sourceibm security appscan sourceeq9.0.1

CPE	Name	Operator	Version
ibm:security_appscan	ibm security appscan	eq	8.5
ibm:security_appscan	ibm security appscan	eq	8.6
ibm:security_appscan	ibm security appscan	eq	8.7
ibm:security_appscan	ibm security appscan	eq	8.8
ibm:security_appscan	ibm security appscan	eq	9.0
ibm:security_appscan	ibm security appscan	eq	9.0.0.1
ibm:security_appscan_source	ibm security appscan source	eq	9.0.1

References

www-01.ibm.com/support/docview.wss?uid=swg21693035

www.securitytracker.com/id/1031427

exchange.xforce.ibmcloud.com/vulnerabilities/96723

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.4%

JSON

Related for CVE-2014-6122

prion1 cvelist1 nvd1