CVE-2014-4756
low
CVSS v3
—
CVSS v2
3.5
VIR risk
3.5
Description
The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to hijack sessions via unspecified vectors.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21681449
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| ibm | rational_license_key_server | 8.1.4 | |
| ibm | rational_license_key_server | 8.1.4.2 | |
| ibm | rational_license_key_server | 8.1.4.3 | |
References
- http://secunia.com/advisories/60709
- http://www-01.ibm.com/support/docview.wss?uid=swg21681449
- http://www-01.ibm.com/support/docview.wss?uid=swg24038045
- http://www.securityfocus.com/bid/69645
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94444
- http://secunia.com/advisories/60709
- http://www-01.ibm.com/support/docview.wss?uid=swg21681449
- http://www-01.ibm.com/support/docview.wss?uid=swg24038045
- http://www.securityfocus.com/bid/69645
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94444
Verify integrity in audit chain (admin only). AS-IS.