Lucene search
IbmCVE-2014-6141HistoryFeb 02, 2015 - 1:59 a.m.
CVE-2014-6141
2015-02-0201:59:01
CWE-264
ibm
web.nvd.nist.gov
22
cve-2014-6141
itm
ibm
security vulnerability
remote access
command execution
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
7.1
Confidence
Low
EPSS
0.003
Percentile
65.5%
IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands.
Affected configurations
Node
ibmtivoli_monitoringMatch6.2.0
ORibmtivoli_monitoringMatch6.2.0.1
ORibmtivoli_monitoringMatch6.2.0.2
ORibmtivoli_monitoringMatch6.2.0.3
ORibmtivoli_monitoringMatch6.2.1
ORibmtivoli_monitoringMatch6.2.1.0
ORibmtivoli_monitoringMatch6.2.1.1
ORibmtivoli_monitoringMatch6.2.1.2
ORibmtivoli_monitoringMatch6.2.1.3
ORibmtivoli_monitoringMatch6.2.1.4
ORibmtivoli_monitoringMatch6.2.2
ORibmtivoli_monitoringMatch6.2.2.0
ORibmtivoli_monitoringMatch6.2.2.1
ORibmtivoli_monitoringMatch6.2.2.2
ORibmtivoli_monitoringMatch6.2.2.3
ORibmtivoli_monitoringMatch6.2.2.4
ORibmtivoli_monitoringMatch6.2.2.5
ORibmtivoli_monitoringMatch6.2.2.6
ORibmtivoli_monitoringMatch6.2.2.7
ORibmtivoli_monitoringMatch6.2.2.8
ORibmtivoli_monitoringMatch6.2.2.9
ORibmtivoli_monitoringMatch6.2.3
ORibmtivoli_monitoringMatch6.2.3.0
ORibmtivoli_monitoringMatch6.2.3.1
ORibmtivoli_monitoringMatch6.2.3.2
ORibmtivoli_monitoringMatch6.2.3.3
ORibmtivoli_monitoringMatch6.2.3.4
ORibmtivoli_monitoringMatch6.2.3.5
ORibmtivoli_monitoringMatch6.3.0
ORibmtivoli_monitoringMatch6.3.0.1
ORibmtivoli_monitoringMatch6.3.0.2
ORibmtivoli_monitoringMatch6.3.0.3
ORibmtivoli_monitoringMatch6.3.0.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | tivoli_monitoring | 6.2.0 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.0:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.0.1 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.1:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.0.2 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.2:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.0.3 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.3:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.1 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.1:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.1.0 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.0:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.1.1 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.1:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.1.2 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.2:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.1.3 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.3:*:*:*:*:*:*:* |
| ibm | tivoli_monitoring | 6.2.1.4 | cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.4:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2014-6141
2015-02-02 01:00:00
prion
prion
Command injection
2015-02-02 01:59:00
nvd
nvd
CVE-2014-6141
2015-02-02 01:59:01
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
7.1
Confidence
Low
EPSS
0.003
Percentile
65.5%
Related for CVE-2014-6141