NVD

Id
35769  
Name
CVE-2014-8890  
Description
IBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.4 allows remote attackers to gain privileges by leveraging the combination of a servlet"s deployment descriptor security constraints and ServletSecurity annotations.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-18  
Modified Date
2016-12-21  
Seq
2014-8890  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
183195 35769 CVE-2014-8890 http://www-01.ibm.com/support/docview.wss?uid=swg21690185  View
183196 35769 CVE-2014-8890 http://www-01.ibm.com/support/docview.wss?uid=swg21963275  View
183197 35769 CVE-2014-8890 71834  View
183198 35769 CVE-2014-8890 1033384  View
183199 35769 CVE-2014-8890 ibm-websphere-cve20148890-priv-escalation(99009)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18425 JVNDB-2014-007300 IBM WebSphere Application Server Liberty Profile における権限を取得される脆弱性 IBM WebSphere Application Server Liberty Profile には、権限を取得される脆弱性が存在します。 CVE-2014-8890 76183 CVE-2014-8890 35769 5.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007300.html 2014-12-08 2014-12-19 View