Lucene search

K
cveIbmCVE-2014-6089
HistoryDec 18, 2014 - 4:59 p.m.

CVE-2014-6089

2014-12-1816:59:10
CWE-19
ibm
web.nvd.nist.gov
21
cve-2014-6089
ibm security access manager
denial of service
vulnerability
nvd

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

68.1%

IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote authenticated users to cause a denial of service (disrupted system operations) by uploading a file to a protected area.

Affected configurations

Nvd
Node
ibmsecurity_access_manager_for_webMatch7.0
OR
ibmsecurity_access_manager_for_webMatch8.0
Node
ibmsecurity_access_manager_for_mobileMatch8.0
VendorProductVersionCPE
ibmsecurity_access_manager_for_web7.0cpe:2.3:a:ibm:security_access_manager_for_web:7.0:*:*:*:*:*:*:*
ibmsecurity_access_manager_for_web8.0cpe:2.3:a:ibm:security_access_manager_for_web:8.0:*:*:*:*:*:*:*
ibmsecurity_access_manager_for_mobile8.0cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

68.1%

Related for CVE-2014-6089