NVD

Id
31327  
Name
CVE-2014-3060  
Description
Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturing a session cookie.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-10-01  
Modified Date
2014-10-02  
Seq
2014-3060  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164038 31327 CVE-2014-3060 IT03476  View
164039 31327 CVE-2014-3060 http://www-01.ibm.com/support/docview.wss?uid=swg21685705  View
164040 31327 CVE-2014-3060 ibm-xc10-cve20143060-sec-bypass(93534)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15629 JVNDB-2014-004504 IBM WebSphere DataPower XC10 アプライアンスにおける管理者権限を取得される脆弱性 IBM WebSphere DataPower XC10 アプライアンスには、管理者権限を取得される脆弱性が存在します。 CVE-2014-3060 70347 CVE-2014-3060 31327 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004504.html 2014-07-31 2014-10-03 View