PT-2014-3977 · Ibm · Ibm Pureapplication System

Published 2014-06-14 · Updated 2017-08-29 · CVE-2014-0960

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM PureApplication System versions 1.0 before 1.0.0.4 cfix8 IBM PureApplication System versions 1.1 before 1.1.0.4 IF1

Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved by establishing an SSH session from a deployed virtual machine.

Recommendations For IBM PureApplication System versions 1.0 before 1.0.0.4 cfix8, update to version 1.0.0.4 cfix8 or later. For IBM PureApplication System versions 1.1 before 1.1.0.4 IF1, update to version 1.1.0.4 IF1 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-0960

Affected Products

Ibm Pureapplication System

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-0960 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21675216 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92743 · Note
• http://secunia.com/advisories/59254 · Note