Vulnerability CVE-2014-0954 - CERT Civis.Net

Vulnerability Name:

CVE-2014-0954 (CCN-92627)

Assigned:

2014-05-13

Published:

2014-05-13

Updated:

2017-08-29

Summary:

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 does not validate JSP includes, which allows remote attackers to obtain sensitive information, bypass intended request-dispatcher access restrictions, or cause a denial of service (memory consumption) via a crafted URL.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2014-0954

Source: AIXAPAR
Type: UNKNOWN
PI15723

Source: CCN
Type: IBM Security Bulletin 1672572
Fixes available for Security Vulnerabilities in IBM WebSphere Portal (Multiple CVEs)

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672572

Source: CCN
Type: BID-67421
IBM WebSphere Portal CVE-2014-0954 Unspecified Security Bypass Vulnerability

Source: XF
Type: UNKNOWN
ibm-websphere-cve20140954-dos(92627)

Source: XF
Type: UNKNOWN
ibm-websphere-cve20140954-dos(92627)

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.0.6:cf27:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.5.3:cf27:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.0:cf001:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:cf002:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:cf003:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:cf004:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:cf005:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:cf006:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:cf007:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:cf008:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:cf009:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:cf010:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.1:cf019:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf011:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf012:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf013:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf014:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf015:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf016:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf017:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf018:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf019:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf020:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf021:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf022:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf23:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf24:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf25:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf26:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:7.0.0.2:cf27:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.0:cf01:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.0:cf02:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.0:cf03:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.0:cf04:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.0:cf05:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.1:cf04:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.1:cf05:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.1:cf07:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.1:cf08:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.1:cf09:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.1:cf10:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0.0.1:cf11:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:ibm:websphere_portal:7.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:8.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:websphere_portal:6.1.0:*:*:*:*:*:*:*

AND

cpe:/a:ibm:websphere_portal:6.1:*:*:*:*:*:*:*

Denotes that component is vulnerable