PT-2014-6141 · Ibm · Ibm Security Access Manager For Mobile+1

Publicado 2014-10-03 · Atualizado 2017-08-29 · CVE-2014-4823

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager for Web versions 7.x before 7.0.0-ISS-WGA-IF0009 IBM Security Access Manager for Web versions 8.x before 8.0.0-ISS-WGA-FP0005 IBM Security Access Manager for Mobile versions 8.x before 8.0.0-ISS-ISAM-FP0005

Description The administration console in the affected software allows remote attackers to inject system commands via unspecified vectors.

Recommendations For IBM Security Access Manager for Web versions 7.x before 7.0.0-ISS-WGA-IF0009, update to 7.0.0-ISS-WGA-IF0009 or later. For IBM Security Access Manager for Web versions 8.x before 8.0.0-ISS-WGA-FP0005, update to 8.0.0-ISS-WGA-FP0005 or later. For IBM Security Access Manager for Mobile versions 8.x before 8.0.0-ISS-ISAM-FP0005, update to 8.0.0-ISS-ISAM-FP0005 or later.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2014-4823

Produtos afetados

Ibm Security Access Manager For Mobile

Ibm Security Access Manager For Web

Referências · 7

• http://secunia.com/advisories/61294 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV64910 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21684466 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV64919 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95573 · Nota
• http://secunia.com/advisories/61278 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4823 · Nota de Segurança