PT-2014-3933 · Ibm · Ibm Security Appscan Standard

Published 2014-03-26 · Updated 2017-08-29 · CVE-2014-0904

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Security AppScan Standard versions 7.9 through 8.8

Description The update process does not require integrity checks of downloaded files, allowing remote attackers to execute arbitrary code via a crafted file.

Recommendations For IBM Security AppScan Standard versions 7.9 through 8.8, update the software to a version that includes integrity checks for downloaded files to prevent arbitrary code execution.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-0904

Affected Products

Ibm Security Appscan Standard

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21666775 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-0904 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91536 · Note