CVE-2014-3079 - CERT CVE
ID CVE-2014-3079
Sažetak The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query.
Reference
CVSS
Base: 2.1
Impact: 2.9
Exploitability:3.9
Pristup
VektorSloženostAutentikacija
NETWORK HIGH SINGLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE NONE
CVSS vektor AV:N/AC:H/Au:S/C:P/I:N/A:N
Zadnje važnije ažuriranje 29-08-2017 - 01:34
Objavljeno 10-09-2014 - 10:55