2.1
CVE-2014-6123
- EPSS 0.31%
- Veröffentlicht 29.12.2014 02:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginIBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Rational Appscan Source Version 8.0.0.0
Ibm ≫ Rational Appscan Source Version 8.0.0.1
Ibm ≫ Rational Appscan Source Version 8.0.0.2
Ibm ≫ Rational Appscan Source Version 8.5.0.0
Ibm ≫ Rational Appscan Source Version 8.5.0.1
Ibm ≫ Security Appscan Source Version 8.6.0.0
Ibm ≫ Security Appscan Source Version 8.6.0.1
Ibm ≫ Security Appscan Source Version 8.6.0.2
Ibm ≫ Security Appscan Source Version 8.7.0.0
Ibm ≫ Security Appscan Source Version 8.7.0.1
Ibm ≫ Security Appscan Source Version 8.8
Ibm ≫ Security Appscan Source Version 9.0
Ibm ≫ Security Appscan Source Version 9.0.0.0
Ibm ≫ Security Appscan Source Version 9.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.31% | 0.227 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www-01.ibm.com/support/docview.wss?uid=swg21692999
https://exchange.xforce.ibmcloud.com/vulnerabilities/96724