Lucene search

[email protected]CVE-2014-6172

HistoryJan 21, 2015 - 3:17 p.m.

CVE-2014-6172

2015-01-2115:17:00

CWE-200

[email protected]

web.nvd.nist.gov

ibm

api management

cve-2014-6172

vulnerability

remote attack

sensitive information

encrypted form

6.7 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.0%

JSON

IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified vectors.

CPENameOperatorVersion
ibm:api_managementibm api managementeq3.0.4.0
ibm:api_managementibm api managementeq3.0.2.0
ibm:api_managementibm api managementeq3.0.0.1
ibm:api_managementibm api managementeq3.0.0.0
ibm:api_managementibm api managementeq3.0.2.1
ibm:api_managementibm api managementeq3.0.3.0

CPE	Name	Operator	Version
ibm:api_management	ibm api management	eq	3.0.4.0
ibm:api_management	ibm api management	eq	3.0.2.0
ibm:api_management	ibm api management	eq	3.0.0.1
ibm:api_management	ibm api management	eq	3.0.0.0
ibm:api_management	ibm api management	eq	3.0.2.1
ibm:api_management	ibm api management	eq	3.0.3.0

References

www-01.ibm.com/support/docview.wss?uid=swg1LI78291

www-01.ibm.com/support/docview.wss?uid=swg21694460

www.securitytracker.com/id/1031613

exchange.xforce.ibmcloud.com/vulnerabilities/98417

6.7 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.0%

JSON

Related for CVE-2014-6172

prion1 cvelist1