Lucene search

K
nvd[email protected]NVD:CVE-2014-0959
HistoryMay 22, 2014 - 11:14 a.m.

CVE-2014-0959

2014-05-2211:14:14
CWE-20
web.nvd.nist.gov
1

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6

Confidence

High

EPSS

0.003

Percentile

69.4%

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote authenticated users to cause a denial of service (infinite loop) via a login redirect.

Affected configurations

Nvd
Node
ibmwebsphere_portalMatch6.1.0.0
OR
ibmwebsphere_portalMatch6.1.0.1
OR
ibmwebsphere_portalMatch6.1.0.2
OR
ibmwebsphere_portalMatch6.1.0.3
OR
ibmwebsphere_portalMatch6.1.0.4
OR
ibmwebsphere_portalMatch6.1.0.5
OR
ibmwebsphere_portalMatch6.1.0.6
OR
ibmwebsphere_portalMatch6.1.0.6cf27
OR
ibmwebsphere_portalMatch6.1.5.0
OR
ibmwebsphere_portalMatch6.1.5.1
OR
ibmwebsphere_portalMatch6.1.5.2
OR
ibmwebsphere_portalMatch6.1.5.3
OR
ibmwebsphere_portalMatch6.1.5.3cf27
OR
ibmwebsphere_portalMatch7.0.0.0
OR
ibmwebsphere_portalMatch7.0.0.0cf001
OR
ibmwebsphere_portalMatch7.0.0.1
OR
ibmwebsphere_portalMatch7.0.0.1cf002
OR
ibmwebsphere_portalMatch7.0.0.1cf003
OR
ibmwebsphere_portalMatch7.0.0.1cf004
OR
ibmwebsphere_portalMatch7.0.0.1cf005
OR
ibmwebsphere_portalMatch7.0.0.1cf006
OR
ibmwebsphere_portalMatch7.0.0.1cf007
OR
ibmwebsphere_portalMatch7.0.0.1cf008
OR
ibmwebsphere_portalMatch7.0.0.1cf009
OR
ibmwebsphere_portalMatch7.0.0.1cf010
OR
ibmwebsphere_portalMatch7.0.0.1cf019
OR
ibmwebsphere_portalMatch7.0.0.2
OR
ibmwebsphere_portalMatch7.0.0.2cf011
OR
ibmwebsphere_portalMatch7.0.0.2cf012
OR
ibmwebsphere_portalMatch7.0.0.2cf013
OR
ibmwebsphere_portalMatch7.0.0.2cf014
OR
ibmwebsphere_portalMatch7.0.0.2cf015
OR
ibmwebsphere_portalMatch7.0.0.2cf016
OR
ibmwebsphere_portalMatch7.0.0.2cf017
OR
ibmwebsphere_portalMatch7.0.0.2cf018
OR
ibmwebsphere_portalMatch7.0.0.2cf019
OR
ibmwebsphere_portalMatch7.0.0.2cf020
OR
ibmwebsphere_portalMatch7.0.0.2cf021
OR
ibmwebsphere_portalMatch7.0.0.2cf022
OR
ibmwebsphere_portalMatch7.0.0.2cf23
OR
ibmwebsphere_portalMatch7.0.0.2cf24
OR
ibmwebsphere_portalMatch7.0.0.2cf25
OR
ibmwebsphere_portalMatch7.0.0.2cf26
OR
ibmwebsphere_portalMatch7.0.0.2cf27
OR
ibmwebsphere_portalMatch8.0.0.0
OR
ibmwebsphere_portalMatch8.0.0.0cf01
OR
ibmwebsphere_portalMatch8.0.0.0cf02
OR
ibmwebsphere_portalMatch8.0.0.0cf03
OR
ibmwebsphere_portalMatch8.0.0.0cf04
OR
ibmwebsphere_portalMatch8.0.0.0cf05
OR
ibmwebsphere_portalMatch8.0.0.1
OR
ibmwebsphere_portalMatch8.0.0.1cf04
OR
ibmwebsphere_portalMatch8.0.0.1cf05
OR
ibmwebsphere_portalMatch8.0.0.1cf07
OR
ibmwebsphere_portalMatch8.0.0.1cf08
OR
ibmwebsphere_portalMatch8.0.0.1cf09
OR
ibmwebsphere_portalMatch8.0.0.1cf10
OR
ibmwebsphere_portalMatch8.0.0.1cf11
OR
ibmwebsphere_portalMatch8.0.0.1cf12
VendorProductVersionCPE
ibmwebsphere_portal6.1.0.0cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.1cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.2cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.3cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.4cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.5cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.6cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.0.6cpe:2.3:a:ibm:websphere_portal:6.1.0.6:cf27:*:*:*:*:*:*
ibmwebsphere_portal6.1.5.0cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*
ibmwebsphere_portal6.1.5.1cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 591

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6

Confidence

High

EPSS

0.003

Percentile

69.4%

Related for NVD:CVE-2014-0959