« Volver al listado

CVE-2014-3063

Estado: ModificadaAlta (7.5)—

IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 allow local users to obtain administrator privileges via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

IBM — Infosphere Master Data ManagementIBM — Infosphere Master Data Management Server FOR Product Information Management

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-3063",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-08-17T23:55:06.417",
  "references": [
    {
      "url": "http://secunia.com/advisories/60680",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/60694",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/60695",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680403",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/93599",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/60680",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/60694",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/60695",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21680403",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/93599",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 allow local users to obtain administrator privileges via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "IBM InfoSphere Master Data Management - Collaborative Edition 10.x anterior a 10.1-FP11 y 11.x anterior a 11.0-FP5 y InfoSphere Master Data Management Server for Product Information Management 9.x anterior a 9.1-FP15 y 10.x y 11.x anterior a 11.3-IF2 permiten a usuarios locales obtener los privilegios de administrador a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:07:32.530",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management:10.0:*:*:*:collaborative:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2C18237-D43D-4423-B03D-0C02EE26C2CE"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management:10.1:*:*:*:collaborative:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38FBFED0-F44F-48BF-96C0-33025890C4D5"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management:11.0:*:*:*:collaborative:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6FE73850-0816-4C28-B114-4FEB2A0B6586"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management:11.3:*:*:*:collaborative:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B51C2B1-4363-455F-8A0D-F92BEDFC0BD4"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05F44C2D-F7E1-46CB-A319-B7D21121DA53"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B31F0A6-7796-42C2-8911-1B0D1B0A26A8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72D767E3-62D2-4D95-894A-012D64EA32F9"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.0.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E51171E-71EA-4552-ACE8-19CBF0CD5BDE"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDB0276A-2098-4D89-B920-EDD399319CDC"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8309680C-B97D-4024-867F-5BCB7DE9662A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFB8D323-F055-47EF-A615-D2B8DBD227B1"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:10.1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73EAB193-E0A4-4937-8B2E-EDABF897D4D9"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C945BE5A-0AA2-42F1-B700-120B8049A2BB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:11.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DC9B52F-E42A-4C1B-8D8A-40AB6497C2FC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}