« Volver al listado

CVE-2014-3051

Estado: ModificadaMedia (4.3)—

The Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30, and 7.4 before 7.4.0.0 IF18 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain credential information via a crafted certificate.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Tivoli Composite Application Manager FOR Transactions

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3051",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-10-29T10:55:03.430",
  "references": [
    {
      "url": "http://secunia.com/advisories/59756",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682290",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/93444",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/59756",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682290",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/93444",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30, and 7.4 before 7.4.0.0 IF18 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain credential information via a crafted certificate."
    },
    {
      "lang": "es",
      "value": "El agente Internet Service Monitor (ISM) en IBM Tivoli Composite Application Manager (ITCAM) for Transactions 7.1 y 7.2 anterior a 7.2.0.3 IF28, 7.3 anterior a 7.3.0.1 IF30, y 7.4 anterior a 7.4.0.0 IF18 no verifica los certificados X.509 de los servidores SSL, lo que permite a atacantes man-in-the-middle suplantar servidores y obtener información sensible a través de un certificado manipulado."
    }
  ],
  "lastModified": "2026-06-17T00:07:31.300",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.1.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4308186-19E0-4988-B487-53E2CE0462F7"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD67DE18-0AFF-448C-BC6E-1D90D31EE240"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE913F12-B84B-43CA-A662-FC96FB4EAE0A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E806A82D-5F71-4353-9253-8748A3BA0BCF"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.1.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9938CD67-A295-453F-B741-B394F32CBB60"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.2.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8E0C397-7BB5-4498-8B24-61ADDC4C4516"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.2.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7D1B1D0-55FA-4D7D-8B7C-1BE2B82D5171"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.2.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99F06AF6-4826-44D3-80A5-39D29082941F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_composite_application_manager_for_transactions:7.3.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63DAC069-2C10-486A-91E7-54F0E307EF9C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}