Vulnerability CVE-2014-6141 - CERT Civis.Net

Vulnerability Name:

CVE-2014-6141 (CCN-96911)

Assigned:

2014-12-12

Published:

2014-12-12

Updated:

2017-09-08

Summary:

IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands.

CVSS v3 Severity:

8.0 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

8.5 High (CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C)
6.3 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

8.5 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C)
6.3 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2014-6141

Source: CONFIRM
Type: Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21690932

Source: CCN
Type: IBM Security Bulletin 1690932
IBM Tivoli Monitoring Authorization Bypass with Remote Code Execution (CVE-2014-6141)

Source: CCN
Type: BID-72315
IBM Tivoli Monitoring CVE-2014-6141 Remote Command Execution Vulnerability

Source: XF
Type: UNKNOWN
ibm-tivoli-cve20146141-code-exec(96911)

Source: XF
Type: UNKNOWN
ibm-itm-cve20146141-sec-bypass(96911)

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:tivoli_monitoring:6.2.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.1.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.1.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.1.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.1.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.1.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2.6:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2.8:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.3.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.3.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.3.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.2.3.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.3.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.3.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.3.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.3.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_monitoring:6.3.0.4:*:*:*:*:*:*:*

Denotes that component is vulnerable