Lucene search

K
nvd[email protected]NVD:CVE-2014-6088
HistoryDec 18, 2014 - 4:59 p.m.

CVE-2014-6088

2014-12-1816:59:09
CWE-200
web.nvd.nist.gov
4

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.003

Percentile

70.2%

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to obtain sensitive information by sniffing the network during use of the null SSL cipher.

Affected configurations

Nvd
Node
ibmsecurity_access_manager_for_webMatch7.0
OR
ibmsecurity_access_manager_for_webMatch8.0
Node
ibmsecurity_access_manager_for_mobileMatch8.0
VendorProductVersionCPE
ibmsecurity_access_manager_for_web7.0cpe:2.3:a:ibm:security_access_manager_for_web:7.0:*:*:*:*:*:*:*
ibmsecurity_access_manager_for_web8.0cpe:2.3:a:ibm:security_access_manager_for_web:8.0:*:*:*:*:*:*:*
ibmsecurity_access_manager_for_mobile8.0cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

0.003

Percentile

70.2%

Related for NVD:CVE-2014-6088