PT-2014-6109 · Ibm · Ibm Websphere Application Server Liberty Profile

Publicado 2014-08-22 · Atualizado 2017-08-29 · CVE-2014-4767

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server (WAS) Liberty Profile versions 8.5.x through 8.5.5.2

Description The issue arises from improper use of the Liberty Repository for feature installation, allowing remote authenticated users to execute arbitrary code.

Recommendations For versions 8.5.x through 8.5.5.2, update to version 8.5.5.3 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2014-4767

Produtos afetados

Ibm Websphere Application Server Liberty Profile

Referências · 6

• http://securityfocus.com/bid/69297 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94832 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4767 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI21284 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21681249 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4767 · Nota