PT-2015-3835 · Ibm · Ibm Security Network Protection

Publicado 2015-01-17 · Atualizado 2017-09-08 · CVE-2014-6197

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Network Protection versions 5.1.x through 5.2.x before 5.2.0.0 FP5 IBM Security Network Protection versions 5.3.x before 5.3.0.0 FP1

Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors.

Recommendations For versions 5.1.x through 5.2.x before 5.2.0.0 FP5, update to 5.2.0.0 FP5 or later. For versions 5.3.x before 5.3.0.0 FP1, update to 5.3.0.0 FP1 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-6197

Produtos afetados

Ibm Security Network Protection

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/98609 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-6197 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21693542 · Aviso do Fabricante