PT-2014-3933 · Ibm · Ibm Security Appscan Standard

Publicado 2014-03-26 · Atualizado 2017-08-29 · CVE-2014-0904

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Standard versions 7.9 through 8.8

Description The update process does not require integrity checks of downloaded files, allowing remote attackers to execute arbitrary code via a crafted file.

Recommendations For IBM Security AppScan Standard versions 7.9 through 8.8, update the software to a version that includes integrity checks for downloaded files to prevent arbitrary code execution.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-0904

Produtos afetados

Ibm Security Appscan Standard

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21666775 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91536 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0904 · Nota de Segurança