Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-6186
HistoryDec 24, 2014 - 11:59 a.m.

CVE-2014-6186

2014-12-2411:59:09
CWE-264
[email protected]
web.nvd.nist.gov
17
ibm
wsrr
security
bypass
object-access
restriction
datagraph
nvd
cve-2014-6186

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.0%

JSON

IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.

Affected configurations

NVD
Node
ibmwebsphere_service_registry_and_repositoryMatch6.3.0
OR
ibmwebsphere_service_registry_and_repositoryMatch6.3.0.1
OR
ibmwebsphere_service_registry_and_repositoryMatch6.3.0.2
OR
ibmwebsphere_service_registry_and_repositoryMatch6.3.0.3
OR
ibmwebsphere_service_registry_and_repositoryMatch6.3.0.4
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0.1
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0.2
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0.3
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0.4
OR
ibmwebsphere_service_registry_and_repositoryMatch7.0.0.5
OR
ibmwebsphere_service_registry_and_repositoryMatch7.5.0.0
OR
ibmwebsphere_service_registry_and_repositoryMatch7.5.0.1
OR
ibmwebsphere_service_registry_and_repositoryMatch7.5.0.2
OR
ibmwebsphere_service_registry_and_repositoryMatch8.0
CPENameOperatorVersion
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq6.3.0
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq6.3.0.1
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq6.3.0.2
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq6.3.0.3
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq6.3.0.4
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq7.0.0
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq7.0.0.1
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq7.0.0.2
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq7.0.0.3
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq7.0.0.4
Rows per page:
1-10 of 151

Related

cvelist 1
prion 1
nvd 1
nessus 4
ibm 2
cvelist
cvelist
CVE-2014-6186
2014-12-24 11:00:00
prion
prion
Design/Logic Flaw
2014-12-24 11:59:00
nvd
nvd
CVE-2014-6186
2014-12-24 11:59:09
nessus
nessus
IBM WebSphere Service Registry and Repository 6.3 < 6.3.0.5 Multiple Vulnerabilities
2015-01-20 00:00:00
IBM WebSphere Service Registry and Repository 7.0 < 7.0.0.5 Multiple Vulnerabilities
2015-01-20 00:00:00
IBM WebSphere Service Registry and Repository 8.0 < 8.0.0.3 Multiple Vulnerabilities
2015-01-20 00:00:00
ibm
ibm
Security Bulletin: Various security issues exist in WebSphere Service Registry and Repository version 8.0
2018-06-15 07:02:22
Security Bulletin: Various security issues exist in WebSphere Service Registry and Repository version 7.5
2018-06-15 07:02:21

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.0%

JSON
Related for CVE-2014-6186
cvelist1prion1nvd1nessus4ibm2