PT-2015-4007 · Red Hat · Kie Workbench

Publicado 2015-02-20 · Atualizado 2015-03-23 · CVE-2014-8115

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions KIE Workbench versions 6.0.x

Description The issue in KIE Workbench allows remote authenticated users to bypass intended access restrictions, read or write to arbitrary files, and possibly have other unspecified impact.

Recommendations For KIE Workbench versions 6.0.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-8115

Produtos afetados

Kie Workbench

Referências · 4

• https://github.com/droolsjbpm/kie-wb-distributions/commit/90eed433d3 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8115 · Nota de Segurança
• http://rhn.redhat.com/errata/RHSA-2015-0235.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2015-0234.html · Aviso do Fabricante