Lucene search

[email protected]CVE-2014-8912

HistoryOct 28, 2015 - 6:59 p.m.

CVE-2014-8912

2015-10-2818:59:00

CWE-284

[email protected]

web.nvd.nist.gov

cve-2014-8912

ibm websphere portal

security vulnerability

remote attack

information disclosure

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.2%

JSON

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts resource access, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by configuration information.

Affected configurations

NVD

Node

ibmwebsphere_portalMatch6.0

ibmwebsphere_portalMatch6.0.0.1

ibmwebsphere_portalMatch6.0.0.2

ibmwebsphere_portalMatch6.0.0.3

ibmwebsphere_portalMatch6.0.0.4

ibmwebsphere_portalMatch6.0.1.0

ibmwebsphere_portalMatch6.0.1.1

ibmwebsphere_portalMatch6.0.1.2

ibmwebsphere_portalMatch6.0.1.3

ibmwebsphere_portalMatch6.0.1.4

ibmwebsphere_portalMatch6.0.1.5

ibmwebsphere_portalMatch6.0.1.6

ibmwebsphere_portalMatch6.0.1.7

ibmwebsphere_portalMatch6.1

ibmwebsphere_portalMatch6.1.0

ibmwebsphere_portalMatch6.1.0.0

ibmwebsphere_portalMatch6.1.0.1

ibmwebsphere_portalMatch6.1.0.2

ibmwebsphere_portalMatch6.1.0.3

ibmwebsphere_portalMatch6.1.0.4

ibmwebsphere_portalMatch6.1.0.5

ibmwebsphere_portalMatch6.1.0.6

ibmwebsphere_portalMatch6.1.5.0

ibmwebsphere_portalMatch6.1.5.1

ibmwebsphere_portalMatch6.1.5.2

ibmwebsphere_portalMatch6.1.5.3

ibmwebsphere_portalMatch7.0.0.0

ibmwebsphere_portalMatch7.0.0.1

ibmwebsphere_portalMatch7.0.0.2

ibmwebsphere_portalMatch8.0.0.0

ibmwebsphere_portalMatch8.0.0.1

ibmwebsphere_portalMatch8.5.0.0

CPENameOperatorVersion
ibm:websphere_portalibm websphere portaleq6.0
ibm:websphere_portalibm websphere portaleq6.0.0.1
ibm:websphere_portalibm websphere portaleq6.0.0.2
ibm:websphere_portalibm websphere portaleq6.0.0.3
ibm:websphere_portalibm websphere portaleq6.0.0.4
ibm:websphere_portalibm websphere portaleq6.0.1.0
ibm:websphere_portalibm websphere portaleq6.0.1.1
ibm:websphere_portalibm websphere portaleq6.0.1.2
ibm:websphere_portalibm websphere portaleq6.0.1.3
ibm:websphere_portalibm websphere portaleq6.0.1.4

CPE	Name	Operator	Version
ibm:websphere_portal	ibm websphere portal	eq	6.0
ibm:websphere_portal	ibm websphere portal	eq	6.0.0.1
ibm:websphere_portal	ibm websphere portal	eq	6.0.0.2
ibm:websphere_portal	ibm websphere portal	eq	6.0.0.3
ibm:websphere_portal	ibm websphere portal	eq	6.0.0.4
ibm:websphere_portal	ibm websphere portal	eq	6.0.1.0
ibm:websphere_portal	ibm websphere portal	eq	6.0.1.1
ibm:websphere_portal	ibm websphere portal	eq	6.0.1.2
ibm:websphere_portal	ibm websphere portal	eq	6.0.1.3
ibm:websphere_portal	ibm websphere portal	eq	6.0.1.4