CVE-2014-0960

CWE-2643 documents3 sources
Severity
6.6MEDIUM
EPSS
0.1%
top 67.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Pureapplication System
Timeline
PublishedJun 14
Latest updateMay 17

Description

IBM PureApplication System 1.0 before 1.0.0.4 cfix8 and 1.1 before 1.1.0.4 IF1 allows remote authenticated users to bypass intended access restrictions by establishing an SSH session from a deployed virtual machine.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 2.7 | Impact: 10.0

Affected Packages1 packages

▶NVDibm/pureapplication_system10 versions+9

🔴Vulnerability Details

2
GHSA
GHSA-x634-3rj8-33g6: IBM PureApplication System 1↗2022-05-17
▶
CVEList
CVE-2014-0960: IBM PureApplication System 1↗2014-06-14
▶
CVE-2014-0960 (MEDIUM CVSS 6.6) | IBM PureApplication System 1.0 befo | cvebase.io