CVE-2014-8927

2015-05-2514:59:06

CWE-399

[email protected]

web.nvd.nist.gov

cve

ibm license metric tool

endpoint manager

denial of service

vulnerability

xml query

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.9%

JSON

Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service (CPU consumption or application crash) via a crafted XML query, a different vulnerability than CVE-2014-8926.

Affected configurations

NVD

Node

ibmendpoint_manager_familyMatch9.0

ibmlicense_metric_toolMatch7.2.2

ibmlicense_metric_toolMatch7.5

ibmlicense_metric_toolMatch9.0

ibmtivoli_asset_discovery_for_distributedMatch7.2.2.0

ibmtivoli_asset_discovery_for_distributedMatch7.5

CPENameOperatorVersion
ibm:endpoint_manager_familyibm endpoint manager familyeq9.0
ibm:license_metric_toolibm license metric tooleq7.2.2
ibm:license_metric_toolibm license metric tooleq7.5
ibm:license_metric_toolibm license metric tooleq9.0
ibm:tivoli_asset_discovery_for_distributedibm tivoli asset discovery for distributedeq7.2.2.0
ibm:tivoli_asset_discovery_for_distributedibm tivoli asset discovery for distributedeq7.5

CPE	Name	Operator	Version
ibm:endpoint_manager_family	ibm endpoint manager family	eq	9.0
ibm:license_metric_tool	ibm license metric tool	eq	7.2.2
ibm:license_metric_tool	ibm license metric tool	eq	7.5
ibm:license_metric_tool	ibm license metric tool	eq	9.0
ibm:tivoli_asset_discovery_for_distributed	ibm tivoli asset discovery for distributed	eq	7.2.2.0
ibm:tivoli_asset_discovery_for_distributed	ibm tivoli asset discovery for distributed	eq	7.5