CVE-2014-4767

2014-08-2201:55:08

CWE-94

ibm

web.nvd.nist.gov

ibm

websphere

application server

was

liberty profile

cve-2014-4767

nvd

security vulnerability

remote code execution

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

9.2

Confidence

High

EPSS

0.007

Percentile

80.2%

JSON

IBM WebSphere Application Server (WAS) Liberty Profile 8.5.x before 8.5.5.3 does not properly use the Liberty Repository for feature installation, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd

Node

ibmwebsphere_application_serverMatch8.5.0.0-liberty_profile

ibmwebsphere_application_serverMatch8.5.0.1-liberty_profile

ibmwebsphere_application_serverMatch8.5.0.2-liberty_profile

ibmwebsphere_application_serverMatch8.5.5.0-liberty_profile

ibmwebsphere_application_serverMatch8.5.5.1-liberty_profile

ibmwebsphere_application_serverMatch8.5.5.2-liberty_profile

VendorProductVersionCPE
ibmwebsphere_application_server8.5.0.0cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:-:liberty_profile:*:*:*:*:*
ibmwebsphere_application_server8.5.0.1cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:-:liberty_profile:*:*:*:*:*
ibmwebsphere_application_server8.5.0.2cpe:2.3:a:ibm:websphere_application_server:8.5.0.2:-:liberty_profile:*:*:*:*:*
ibmwebsphere_application_server8.5.5.0cpe:2.3:a:ibm:websphere_application_server:8.5.5.0:-:liberty_profile:*:*:*:*:*
ibmwebsphere_application_server8.5.5.1cpe:2.3:a:ibm:websphere_application_server:8.5.5.1:-:liberty_profile:*:*:*:*:*
ibmwebsphere_application_server8.5.5.2cpe:2.3:a:ibm:websphere_application_server:8.5.5.2:-:liberty_profile:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_application_server	8.5.0.0	cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:-:liberty_profile:::::*
ibm	websphere_application_server	8.5.0.1	cpe:2.3:a:ibm:websphere_application_server:8.5.0.1:-:liberty_profile:::::*
ibm	websphere_application_server	8.5.0.2	cpe:2.3:a:ibm:websphere_application_server:8.5.0.2:-:liberty_profile:::::*
ibm	websphere_application_server	8.5.5.0	cpe:2.3:a:ibm:websphere_application_server:8.5.5.0:-:liberty_profile:::::*
ibm	websphere_application_server	8.5.5.1	cpe:2.3:a:ibm:websphere_application_server:8.5.5.1:-:liberty_profile:::::*
ibm	websphere_application_server	8.5.5.2	cpe:2.3:a:ibm:websphere_application_server:8.5.5.2:-:liberty_profile:::::*