NVD

Id
31319  
Name
CVE-2014-3052  
Description
The reverse-proxy feature in IBM Security Access Manager (ISAM) for Web 8.0 with firmware 8.0.0.2 and 8.0.0.3 interprets the jct-nist-compliance parameter in the opposite of the intended manner, which makes it easier for remote attackers to obtain sensitive information by leveraging weak SSL encryption settings that lack NIST SP 800-131A compliance.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-06-21  
Modified Date
2014-06-23  
Seq
2014-3052  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164006 31319 CVE-2014-3052 IV61553  View
164007 31319 CVE-2014-3052 http://www-01.ibm.com/support/docview.wss?uid=swg21676705  View
164008 31319 CVE-2014-3052 ibm-isam-cve20143052-encryption(93454)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14146 JVNDB-2014-003021 IBM Security Access Manager for Web のファームウェアにおける重要な情報を取得される脆弱性 IBM Security Access Manager (ISAM) for Web のファームウェアは、jct-nist-compliance パラメータを適切に解釈しないため、重要な情報を取得される脆弱性が存在します。 CVE-2014-3052 70339 CVE-2014-3052 31319 3.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003021.html 2014-06-21 2014-06-24 View