[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253650

 
 

909

 
 

197367

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-3079Date: (C)2014-09-10   (M)2023-12-22


The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 2.1
Exploit Score: 3.9
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: HIGH
Authentication: SINGLE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE
  
Reference:
SECUNIA-60709
SECUNIA-61071
BID-69643
http://www-01.ibm.com/support/docview.wss?uid=swg21681449
http://www-01.ibm.com/support/docview.wss?uid=swg21682627
http://www-01.ibm.com/support/docview.wss?uid=swg24038045
ibm-rlksart-cve20143079-describe(93912)

CPE    3
cpe:/a:ibm:rational_license_key_server:8.1.4
cpe:/a:ibm:rational_license_key_server:8.1.4.2
cpe:/a:ibm:rational_license_key_server:8.1.4.3
CWE    1
CWE-264

© SecPod Technologies