Lucene search
IbmCVE-2014-8912HistoryOct 28, 2015 - 6:59 p.m.
CVE-2014-8912
2015-10-2818:59:00
CWE-284
ibm
web.nvd.nist.gov
32
cve-2014-8912
ibm websphere portal
security vulnerability
remote attack
information disclosure
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
8.2
Confidence
High
EPSS
0.003
Percentile
69.1%
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts resource access, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by configuration information.
Affected configurations
Node
ibmwebsphere_portalMatch6.0
ORibmwebsphere_portalMatch6.0.0.1
ORibmwebsphere_portalMatch6.0.0.2
ORibmwebsphere_portalMatch6.0.0.3
ORibmwebsphere_portalMatch6.0.0.4
ORibmwebsphere_portalMatch6.0.1.0
ORibmwebsphere_portalMatch6.0.1.1
ORibmwebsphere_portalMatch6.0.1.2
ORibmwebsphere_portalMatch6.0.1.3
ORibmwebsphere_portalMatch6.0.1.4
ORibmwebsphere_portalMatch6.0.1.5
ORibmwebsphere_portalMatch6.0.1.6
ORibmwebsphere_portalMatch6.0.1.7
ORibmwebsphere_portalMatch6.1
ORibmwebsphere_portalMatch6.1.0
ORibmwebsphere_portalMatch6.1.0.0
ORibmwebsphere_portalMatch6.1.0.1
ORibmwebsphere_portalMatch6.1.0.2
ORibmwebsphere_portalMatch6.1.0.3
ORibmwebsphere_portalMatch6.1.0.4
ORibmwebsphere_portalMatch6.1.0.5
ORibmwebsphere_portalMatch6.1.0.6
ORibmwebsphere_portalMatch6.1.5.0
ORibmwebsphere_portalMatch6.1.5.1
ORibmwebsphere_portalMatch6.1.5.2
ORibmwebsphere_portalMatch6.1.5.3
ORibmwebsphere_portalMatch7.0.0.0
ORibmwebsphere_portalMatch7.0.0.1
ORibmwebsphere_portalMatch7.0.0.2
ORibmwebsphere_portalMatch8.0.0.0
ORibmwebsphere_portalMatch8.0.0.1
ORibmwebsphere_portalMatch8.5.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_portal | 6.0 | cpe:2.3:a:ibm:websphere_portal:6.0:*:*:*:*:*:*:* |
| ibm | websphere_portal | 6.0.0.1 | cpe:2.3:a:ibm:websphere_portal:6.0.0.1:*:*:*:*:*:*:* |
| ibm | websphere_portal | 6.0.0.2 | cpe:2.3:a:ibm:websphere_portal:6.0.0.2:*:*:*:*:*:*:* |
| ibm | websphere_portal | 6.0.0.3 | cpe:2.3:a:ibm:websphere_portal:6.0.0.3:*:*:*:*:*:*:* |
| ibm | websphere_portal | 6.0.0.4 | cpe:2.3:a:ibm:websphere_portal:6.0.0.4:*:*:*:*:*:*:* |
| ibm | websphere_portal | 6.0.1.0 | cpe:2.3:a:ibm:websphere_portal:6.0.1.0:*:*:*:*:*:*:* |
| ibm | websphere_portal | 6.0.1.1 | cpe:2.3:a:ibm:websphere_portal:6.0.1.1:*:*:*:*:*:*:* |
| ibm | websphere_portal | 6.0.1.2 | cpe:2.3:a:ibm:websphere_portal:6.0.1.2:*:*:*:*:*:*:* |
| ibm | websphere_portal | 6.0.1.3 | cpe:2.3:a:ibm:websphere_portal:6.0.1.3:*:*:*:*:*:*:* |
| ibm | websphere_portal | 6.0.1.4 | cpe:2.3:a:ibm:websphere_portal:6.0.1.4:*:*:*:*:*:*:* |
Related
ibm
ibm
nvd
nvd
CVE-2014-8912
2015-10-28 18:59:00
prion
prion
Design/Logic Flaw
2015-10-28 18:59:00
cvelist
cvelist
CVE-2014-8912
2015-10-28 18:00:00
openvas
openvas
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
8.2
Confidence
High
EPSS
0.003
Percentile
69.1%
Related for CVE-2014-8912