CVEvulnerability
CVE-2014-3079
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-09-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:N/AC:H/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query.
Affected configurations
• ibm rational license key server 8.1.4
• ibm rational license key server 8.1.4.2
• ibm rational license key server 8.1.4.3
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/60709 secunia.com
- http://secunia.com/advisories/61071 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21681449 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21682627 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg24038045 www-01.ibm.com
- http://www.securityfocus.com/bid/69643 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93912 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/60709 secunia.com
- http://secunia.com/advisories/61071 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21681449 Patch, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21682627 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg24038045 www-01.ibm.com
- http://www.securityfocus.com/bid/69643 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93912 exchange.xforce.ibmcloud.com