PT-2014-3977 · Ibm · Ibm Pureapplication System

Publicado

2014-06-14

·

Atualizado

2017-08-29

·

CVE-2014-0960

CVSS v2.0

6.6

Média

VetorAV:L/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions IBM PureApplication System versions 1.0 before 1.0.0.4 cfix8 IBM PureApplication System versions 1.1 before 1.1.0.4 IF1
Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved by establishing an SSH session from a deployed virtual machine.
Recommendations For IBM PureApplication System versions 1.0 before 1.0.0.4 cfix8, update to version 1.0.0.4 cfix8 or later. For IBM PureApplication System versions 1.1 before 1.1.0.4 IF1, update to version 1.1.0.4 IF1 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-0960

Produtos afetados

Ibm Pureapplication System