First published: Sun Mar 02 2014(Updated: )
Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code via unknown vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Collaborative Lifecycle Management | =3.0.0 | |
IBM Collaborative Lifecycle Management | =3.0.1 | |
IBM Collaborative Lifecycle Management | =3.0.1.1 | |
IBM Collaborative Lifecycle Management | =3.0.1.2 | |
IBM Collaborative Lifecycle Management | =3.0.1.3 | |
IBM Collaborative Lifecycle Management | =3.0.1.4 | |
IBM Collaborative Lifecycle Management | =3.0.1.5 | |
IBM Collaborative Lifecycle Management | =3.0.1.6 | |
IBM Collaborative Lifecycle Management | =4.0.0 | |
IBM Collaborative Lifecycle Management | =4.0.1 | |
IBM Collaborative Lifecycle Management | =4.0.2 | |
IBM Collaborative Lifecycle Management | =4.0.3 | |
IBM Collaborative Lifecycle Management | =4.0.4 | |
IBM Collaborative Lifecycle Management | =4.0.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2014-0862 is classified as critical due to the potential for remote attackers to execute arbitrary code.
To fix CVE-2014-0862, upgrade to IBM Rational Collaborative Lifecycle Management version 3.0.1.6 iFix 2 or 4.0.6 or later.
CVE-2014-0862 affects IBM Rational Collaborative Lifecycle Management versions 3.x before 3.0.1.6 iFix 2 and 4.x before 4.0.6.
Yes, CVE-2014-0862 can be exploited remotely by attackers due to unspecified vectors in the software.
Organizations using affected versions should prioritize applying the security updates and fixes as soon as possible.