CVE-2014-6122

CWE-2643 documents3 sources
Severity
5.5MEDIUM
EPSS
1.3%
top 19.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Security AppscanIBM Security Appscan Source
Timeline
PublishedDec 23
Latest updateMay 17

Description

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote authenticated users to write to arbitrary folders, and consequently execute arbitrary commands, via a modified argument.

CVSS vector

AV:N/AC:L/C:N/I:P/A:PExploitability: 8.0 | Impact: 4.9

Affected Packages2 packages

▶NVDibm/security_appscan6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-hp43-2xcx-39hv: IBM Security AppScan Enterprise 8↗2022-05-17
▶
CVEList
CVE-2014-6122: IBM Security AppScan Enterprise 8↗2014-12-23
▶