« Volver al listado

CVE-2015-1907

Estado: ModificadaMedia (4)—

The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Rational License KEY Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-1907",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-05-08T01:59:01.347",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21882666",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/74552",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1032257",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21882666",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/74552",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1032257",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "La herramienta de administración y informes en IBM Rational License Key Server (RLKS) 8.1.4 anterior a 8.1.4.7 permite a usuarios remotos autenticados leer cookies a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:23:12.657",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_key_server:8.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26882ACD-C553-4238-B52C-154A31EDF8A4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_key_server:8.1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E25024B1-CDB7-4908-8C95-76CB9CDE3A93"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_key_server:8.1.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9CE93C63-29F2-459E-82BD-777BE72521F1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_key_server:8.1.4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5BB8EFC1-0295-41F0-8A1D-3ACC35C7BCD4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_key_server:8.1.4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0AB55C3-D6CF-40DE-BA1A-E9399386F427"
            },
            {
              "criteria": "cpe:2.3:a:ibm:rational_license_key_server:8.1.4.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "038CF54C-28D4-4F6E-BC43-E64B4995BB20"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}