CVE-2014-6120

Опубликовано: 12 апр. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID: 96721.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/96721
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/96721
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_appscan_source:8.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan_source:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan_source:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan_source:8.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_appscan_source:8.5.0.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:security_appscan_source:8.6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:8.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:9.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:9.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan_source:9.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03986

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-77

Связанные уязвимости

GHSA-ccq2-pw4v-mwxx