CVE-2014-0877

EPSS 0.26%
Published 05.09.2014 17:55:06
Last modified 12.04.2025 10:46:40
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

IBM Cognos TM1 10.2.0.2 before IF1 and 10.2.2.0 before IF1 allows remote attackers to bypass intended access restrictions by visiting the Rights page and then following a generated link.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Cognos Tm1 Version10.2.0.2

Ibm ≫ Cognos Tm1 Version10.2.2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.26%	0.465

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

http://www-01.ibm.com/support/docview.wss?uid=swg21682395

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/91064

https://nvd.nist.gov/vuln/detail/CVE-2014-0877

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-0877

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-0877

EUVD