« Volver al listado

CVE-2014-6147

Estado: ModificadaBaja (2.1)—

IBM Flex System Manager (FSM) 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0, and 1.3.2.0 allows local users to obtain sensitive information, and consequently gain privileges or conduct impersonation attacks, via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IBM — Flex System Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-6147",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-02-19T02:59:33.977",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT05310",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5097120",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96917",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IT05310",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5097120",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96917",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Flex System Manager (FSM) 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0, and 1.3.2.0 allows local users to obtain sensitive information, and consequently gain privileges or conduct impersonation attacks, via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "IBM Flex System Manager (FSM) 1.1.x.x, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0, y 1.3.2.0 permite a usuarios locales obtener información sensible, y como consecuencia ganar privilegios o realizar ataques de la suplantación de identidad, a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:12:38.590",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:flex_system_manager:1.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8180A101-9ACD-48E4-AF50-7522A546C8E2"
            },
            {
              "criteria": "cpe:2.3:a:ibm:flex_system_manager:1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD65C3DA-831B-4FF7-BA3D-0DCCDC648941"
            },
            {
              "criteria": "cpe:2.3:a:ibm:flex_system_manager:1.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4591623A-C3CE-4768-9FB6-C01ACA327439"
            },
            {
              "criteria": "cpe:2.3:a:ibm:flex_system_manager:1.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "88037903-4C41-4298-8FA7-0094F9227A3C"
            },
            {
              "criteria": "cpe:2.3:a:ibm:flex_system_manager:1.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E60012C9-7E1A-4C91-B61D-D09D1F5F930B"
            },
            {
              "criteria": "cpe:2.3:a:ibm:flex_system_manager:1.3.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C580250D-F2A4-4FE1-AF33-949DA4E3BA28"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}