CVE-2011-1367

Опубликовано: 30 окт. 2011

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Unspecified vulnerability in the File Load feature in IBM Rational AppScan Standard and Express 7.8.x, 7.9.x, and 8.0.x before 8.0.0.3 allows remote attackers to execute arbitrary commands via a crafted .scan file.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_appscan:7.8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.9.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.9.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:8.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:8.0.0.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:rational_appscan:7.8.0:*:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.8.0.1:*:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.8.0.2:*:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.9.0:*:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.9.0.1:*:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.9.0.2:*:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:7.9.0.3:*:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:8.0.0:*:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:8.0.0.1:*:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan:8.0.0.2:*:enterprise:*:*:*:*:*

EPSS

Процентиль: 78%

0.01186

Низкий

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-q937-2q57-mgxf

github

больше 3 лет назад