CVE-2014-4812

Опубликовано: 26 окт. 2014

Источник: nvd

CVSS2: 1.8

EPSS Низкий

Описание

The installer in IBM Security AppScan Source 8.x and 9.x through 9.0.1 has an open network port for a debug service, which allows remote attackers to obtain sensitive information by connecting to this port.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_appscan_source:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.7.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:9.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:9.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.0011

Низкий

1.8 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-42j2-v49x-mg57

github

больше 3 лет назад