Lucene search
HistoryOct 26, 2015 - 2:59 a.m.
CVE-2015-5014
ibm
cognos
disclosure management
cdm
security
cve-2015-5014
man-in-the-middle
spoofing
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
51.4%
IBM Cognos Disclosure Management (CDM) 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation.
Affected configurations
Node
ibmcognos_disclosure_managementMatch10.2.0
ORibmcognos_disclosure_managementMatch10.2.1
ORibmcognos_disclosure_managementMatch10.2.2
ORibmcognos_disclosure_managementMatch10.2.3
ORibmcognos_disclosure_managementMatch10.2.4
Related
cvelist
cvelist
CVE-2015-5014
2015-10-26 01:00:00
prion
prion
Privilege escalation
2015-10-26 02:59:00
nvd
nvd
CVE-2015-5014
2015-10-26 02:59:03
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
51.4%
Related for CVE-2015-5014