CVE

Id
70374  
CVE No.
CVE-2014-3079  
Status
Candidate  
Description
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query.  
Phase
Assigned (20140429)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
669624 70374 CVE-2014-3079 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21681449  View
669625 70374 CVE-2014-3079 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21682627  View
669626 70374 CVE-2014-3079 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg24038045  View
669627 70374 CVE-2014-3079 BID:69643  View
669628 70374 CVE-2014-3079 URL:http://www.securityfocus.com/bid/69643  View
669629 70374 CVE-2014-3079 SECUNIA:61071  View
669630 70374 CVE-2014-3079 URL:http://secunia.com/advisories/61071  View
669631 70374 CVE-2014-3079 SECUNIA:60709  View
669632 70374 CVE-2014-3079 URL:http://secunia.com/advisories/60709  View
669633 70374 CVE-2014-3079 XF:ibm-rlksart-cve20143079-describe(93912)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14962 JVNDB-2014-003837 IBM Business Process Manager および WebSphere Lombardi Edition の callService.do における任意のファイルを読まれる脆弱性 IBM Business Process Manager (BPM) および WebSphere Lombardi Edition の callService.do には、任意のファイルを読まれる脆弱性が存在します。 CVE-2014-3087 70374 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003837.html  View