« Volver al listado

CVE-2014-6141

Estado: ModificadaAlta (8.5)—

IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-6141",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-02-02T01:59:01.373",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21690932",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96911",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21690932",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96911",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging Take Action view authority to modify in-progress commands."
    },
    {
      "lang": "es",
      "value": "IBM Tivoli Monitoring (ITM) 6.2.0 hasta FP03, 6.2.1 hasta FP04, 6.2.2 hasta FP09, 6.2.3 hasta FP05, y 6.3.0 anterior a FP04 permite a usuarios remotos autenticados evadir las restricciones de acceso y ejecutar comandos arbitrarios mediante el aprovechamiento de la autoridad de visualización 'Take Action' para modificar los comandos en proceso."
    }
  ],
  "lastModified": "2026-06-17T00:12:38.080",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2289E7D5-2915-42D3-BE86-FF63BF507251"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "45864079-DC1E-42F6-B9D4-36E1A46DE093"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "39A65FE7-7745-4D94-A22C-D0C7CF1C339A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DB4F6B1-F1A1-40A3-9EB6-36CBDCF5FD55"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13DB3D7D-0D80-4B7E-B516-D4AE2AE3FC48"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11F1528F-BE73-4B03-BFA5-B1F96099F3F2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD8B5726-CDA8-4BDE-B2A6-AE308959A862"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6233ED9B-760D-4218-A25B-DF67D703D9EB"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "350B304F-4ED0-4A91-A901-77A149DE2481"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50A2D35D-4170-4DD7-9AD3-39F23D432289"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15E20435-C3A0-4A57-B82A-595A48BB0991"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33A34B3F-710C-42A8-B791-DA624B23E36D"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5010AB5-0932-4F05-9D6A-9D4C49151E83"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7299B1C8-7BC2-4F42-B19E-4D0D2E599D02"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1FC98EF0-EDCA-47D8-A4CE-083E3AA0376C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6522CFEE-4368-4596-8DB9-18247AB19C67"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E386E16-9F8F-4444-A190-EF964CA339F6"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC24B012-A887-4A3F-A32C-80435C64BC10"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0B310DC-21E5-4A0D-A3D6-B0FD21C6C4F8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "499FAEEF-0533-44FE-8249-AE40C6233E06"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E8B4310-F5D2-4448-89C1-E6D656351E7C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "88380637-715A-49CB-A9B6-0F8411225E9C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3AF6714-0D55-4C81-B354-F3875ACE4388"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "94A90709-74AD-4C1B-806C-E7E335A3A773"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E17308E6-B755-434F-8D2B-E5BBA37BA1F8"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C6368EC-1103-419B-8A11-14443501B435"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E58E2E4-ADA3-4189-BE8C-1943CDEA7791"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.2.3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F1EEA0F-0501-4316-BD33-ECF44BDD9008"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBDE2E0B-6F98-4289-A3AF-EF4105782C7B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A9F4C32-6077-475E-A285-F98A0336C53F"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0355309B-CCBF-49EA-BE50-7B8E9B637473"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3C781C7-70D8-44EA-8847-54815053A092"
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_monitoring:6.3.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F409ECF-2033-49E0-9599-DD827CD4DB2A"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}