PT-2014-3900 · Ibm · Ibm Rational Collaborative Lifecycle Management

Published 2014-03-02 · Updated 2017-08-29 · CVE-2014-0862

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management (CLM) versions 3.x before 3.0.1.6 iFix 2 IBM Rational Collaborative Lifecycle Management (CLM) versions 4.x before 4.0.6

Description The issue allows remote attackers to execute arbitrary code via unknown vectors.

Recommendations For versions 3.x before 3.0.1.6 iFix 2, update to 3.0.1.6 iFix 2 or later. For versions 4.x before 4.0.6, update to 4.0.6 or later.

Fix

Related Identifiers

CVE-2014-0862

MGASA-2015-0240

Affected Products

Ibm Rational Collaborative Lifecycle Management

References · 9

• http://www-01.ibm.com/support/docview.wss?uid=swg21664566 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0862 · Security Note
• https://advisories.mageia.org/MGASA-2015-0240.html · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90895 · Note
• http://rabbitmq.com/news.html · Note
• https://groups.google.com/forum/#!topic/rabbitmq-users/-3Z2FyGtXhs · Note
• https://bugs.mageia.org/show_bug.cgi?id=15120 · Note
• http://openwall.com/lists/oss-security/2015/01/27/8 · Note