PT-2014-6109 · Ibm · Ibm Websphere Application Server Liberty Profile
CVE-2014-4767
·
Publicado
2014-08-22
·
Atualizado
2017-08-29
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
IBM WebSphere Application Server (WAS) Liberty Profile versions 8.5.x through 8.5.5.2
Description
The issue arises from improper use of the Liberty Repository for feature installation, allowing remote authenticated users to execute arbitrary code.
Recommendations
For versions 8.5.x through 8.5.5.2, update to version 8.5.5.3 or later to resolve the issue.
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Websphere Application Server Liberty Profile