« Volver al listado

CVE-2011-1389

Estado: ModificadaAlta (10)—

Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-4135.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

IBM — Rational License KEY ServerIBM — Rational License ServerIBM — Telelogic License Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-1389",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-01-19T19:55:00.990",
  "references": [
    {
      "url": "http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/47522",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/47524",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.flexerasoftware.com/pl/13057.htm",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21577760",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/49191",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-11-272/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71739",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/47522",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/47524",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.flexerasoftware.com/pl/13057.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/docview.wss?uid=swg21577760",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/49191",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-11-272/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71739",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files.  NOTE: this might overlap CVE-2011-4135."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de salto de directorio en el demonio de proveedor de Rational Common Licensing en Telelogic License Server v2.0, Rational License Server v7.x y ibmratl en IBM Rational License Key Server (RLKS) v8.0 hasta v8.1.2 permiten a atacantes remotos ejecutar código de su elección a través de vectores relacionados con las operaciones de guardar, renombrar y carga en los archivos de registro. NOTA: éste problema podría superponerse con el CVE-2011-4135."
    }
  ],
  "lastModified": "2026-06-16T23:29:15.273",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_key_server:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2FEF9CA6-72BA-4270-8207-05EC4B247348"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_key_server:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9D9D753-420F-4A47-832C-57E7EA257751"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_key_server:8.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B09FF05-9A02-4E7D-A9C5-B89693F8E1C1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_key_server:8.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9EDEEB79-F35A-4C70-952D-F8699DD18AA2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_server:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "107D32BA-BD97-4E16-BD4D-E65D357DC2EF"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_server:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDD1DA46-2348-4A73-9174-C52F50619A76"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_server:7.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9057BFED-74A6-49B9-9A26-5E27058B67C1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:telelogic_license_server:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44479B86-31BC-4EB7-9330-EAD394D8FDEE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}