Vulnerability CVE-2014-3056
Published: 2014-07-29

Description:
The Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers to obtain potentially sensitive information about environment variables and JAR versions via unspecified vectors.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
IBM -> Websphere portal 
IBM -> Websphere portal unified task list portlet 

 References:
http://secunia.com/advisories/60499
http://www-01.ibm.com/support/docview.wss?uid=swg1PI18909
http://www-01.ibm.com/support/docview.wss?uid=swg21677032
http://xforce.iss.net/xforce/xfdb/93530
Copyright 2024, cxsecurity.com

 

Back to Top