CVE-2014-3072

Опубликовано: 12 авг. 2014

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0 through 9.0.0.1 allows local users to gain privileges by executing a crafted service.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21680537
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/93787
http://www-01.ibm.com/support/docview.wss?uid=swg21680537
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/93787

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_appscan_source:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.7.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:9.0.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00146

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-87x9-22px-54rx

github

больше 3 лет назад