Lucene search

K
cve[email protected]CVE-2015-0169
HistoryMay 25, 2015 - 2:59 p.m.

CVE-2015-0169

2015-05-2514:59:13
CWE-74
web.nvd.nist.gov
16
ibm
security
siteprotector
system
cve-2015-0169
remote
authentication
injection
vulnerability

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.2%

IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arguments via unspecified vectors.

Affected configurations

NVD
Node
ibmsecurity_siteprotector_systemMatch3.0
OR
ibmsecurity_siteprotector_systemMatch3.0.0.1
OR
ibmsecurity_siteprotector_systemMatch3.0.0.2
OR
ibmsecurity_siteprotector_systemMatch3.0.0.3
OR
ibmsecurity_siteprotector_systemMatch3.0.0.4
OR
ibmsecurity_siteprotector_systemMatch3.0.0.5
OR
ibmsecurity_siteprotector_systemMatch3.0.0.6
OR
ibmsecurity_siteprotector_systemMatch3.1.0.0
OR
ibmsecurity_siteprotector_systemMatch3.1.0.1
OR
ibmsecurity_siteprotector_systemMatch3.1.0.2
OR
ibmsecurity_siteprotector_systemMatch3.1.0.3
OR
ibmsecurity_siteprotector_systemMatch3.1.1.0
OR
ibmsecurity_siteprotector_systemMatch3.1.1.1

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

34.2%

Related for CVE-2015-0169