NVD

Id
31344  
Name
CVE-2014-3079  
Description
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-09-10  
Modified Date
2017-01-06  
Seq
2014-3079  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
164121 31344 CVE-2014-3079 60709  View
164122 31344 CVE-2014-3079 61071  View
164123 31344 CVE-2014-3079 http://www-01.ibm.com/support/docview.wss?uid=swg21681449  View
164124 31344 CVE-2014-3079 http://www-01.ibm.com/support/docview.wss?uid=swg21682627  View
164125 31344 CVE-2014-3079 http://www-01.ibm.com/support/docview.wss?uid=swg24038045  View
164126 31344 CVE-2014-3079 69643  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15266 JVNDB-2014-004141 IBM Rational License Key Server の Administration and Reporting Tool における認証チェックを回避される脆弱性 IBM Rational License Key Server (RLKS) の Administration and Reporting Tool には、認証チェックを回避され、ライセンスの使用状況 (license-usage) のデータに含まれる不特定の URL にアクセスされる脆弱性が存在します。 CVE-2014-3079 70366 CVE-2014-3079 31344 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004141.html 2014-09-04 2014-09-11 View