CVEvulnerability
CVE-2014-3056
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.
Affected configurations
• ibm websphere portal 7.0.0.0
• ibm websphere portal 7.0.0.1
• ibm websphere portal 7.0.0.2
• ibm websphere portal 8.0.0.0
• ibm websphere portal 8.0.0.1
• ibm websphere portal unified task list portlet 6.0.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://secunia.com/advisories/60499 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21677032 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93530 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/60499 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21677032 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93530 exchange.xforce.ibmcloud.com