CVE-2014-0862
First published: Sun Mar 02 2014(Updated: )
Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code via unknown vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Collaborative Lifecycle Management | =3.0.0 | |
| IBM Collaborative Lifecycle Management | =3.0.1 | |
| IBM Collaborative Lifecycle Management | =3.0.1.1 | |
| IBM Collaborative Lifecycle Management | =3.0.1.2 | |
| IBM Collaborative Lifecycle Management | =3.0.1.3 | |
| IBM Collaborative Lifecycle Management | =3.0.1.4 | |
| IBM Collaborative Lifecycle Management | =3.0.1.5 | |
| IBM Collaborative Lifecycle Management | =3.0.1.6 | |
| IBM Collaborative Lifecycle Management | =4.0.0 | |
| IBM Collaborative Lifecycle Management | =4.0.1 | |
| IBM Collaborative Lifecycle Management | =4.0.2 | |
| IBM Collaborative Lifecycle Management | =4.0.3 | |
| IBM Collaborative Lifecycle Management | =4.0.4 | |
| IBM Collaborative Lifecycle Management | =4.0.5 | |
| =3.0.0 | ||
| =3.0.1 | ||
| =3.0.1.1 | ||
| =3.0.1.2 | ||
| =3.0.1.3 | ||
| =3.0.1.4 | ||
| =3.0.1.5 | ||
| =3.0.1.6 | ||
| =4.0.0 | ||
| =4.0.1 | ||
| =4.0.2 | ||
| =4.0.3 | ||
| =4.0.4 | ||
| =4.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-0862?
The severity of CVE-2014-0862 is classified as critical due to the potential for remote attackers to execute arbitrary code.
How do I fix CVE-2014-0862?
To fix CVE-2014-0862, upgrade to IBM Rational Collaborative Lifecycle Management version 3.0.1.6 iFix 2 or 4.0.6 or later.
Which versions of IBM Rational Collaborative Lifecycle Management are affected by CVE-2014-0862?
CVE-2014-0862 affects IBM Rational Collaborative Lifecycle Management versions 3.x before 3.0.1.6 iFix 2 and 4.x before 4.0.6.
Can CVE-2014-0862 be exploited remotely?
Yes, CVE-2014-0862 can be exploited remotely by attackers due to unspecified vectors in the software.
What should organizations do if they are using affected versions of IBM Rational Collaborative Lifecycle Management?
Organizations using affected versions should prioritize applying the security updates and fixes as soon as possible.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/description
- agent/author
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/ibm
- canonical/ibm collaborative lifecycle management
- version/ibm collaborative lifecycle management/3.0.0
- version/ibm collaborative lifecycle management/3.0.1
- version/ibm collaborative lifecycle management/3.0.1.1
- version/ibm collaborative lifecycle management/3.0.1.2
- version/ibm collaborative lifecycle management/3.0.1.3
- version/ibm collaborative lifecycle management/3.0.1.4
- version/ibm collaborative lifecycle management/3.0.1.5
- version/ibm collaborative lifecycle management/3.0.1.6
- version/ibm collaborative lifecycle management/4.0.0
- version/ibm collaborative lifecycle management/4.0.1
- version/ibm collaborative lifecycle management/4.0.2
- version/ibm collaborative lifecycle management/4.0.3
- version/ibm collaborative lifecycle management/4.0.4
- version/ibm collaborative lifecycle management/4.0.5