PT-2014-3900 · Ibm · Ibm Rational Collaborative Lifecycle Management

Publicado 2014-03-02 · Atualizado 2017-08-29 · CVE-2014-0862

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management (CLM) versions 3.x before 3.0.1.6 iFix 2 IBM Rational Collaborative Lifecycle Management (CLM) versions 4.x before 4.0.6

Description The issue allows remote attackers to execute arbitrary code via unknown vectors.

Recommendations For versions 3.x before 3.0.1.6 iFix 2, update to 3.0.1.6 iFix 2 or later. For versions 4.x before 4.0.6, update to 4.0.6 or later.

Correção

Identificadores relacionados

CVE-2014-0862

MGASA-2015-0240

Produtos afetados

Ibm Rational Collaborative Lifecycle Management

Referências · 9

• https://exchange.xforce.ibmcloud.com/vulnerabilities/90895 · Nota
• http://rabbitmq.com/news.html · Nota
• https://groups.google.com/forum/#!topic/rabbitmq-users/-3Z2FyGtXhs · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21664566 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2015-0240 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-0862 · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=15120 · Nota
• https://advisories.mageia.org/MGASA-2015-0240.html · Nota de Segurança
• http://openwall.com/lists/oss-security/2015/01/27/8 · Nota