CVE-2014-0960: Medium severity IBM PureApplication System vulnerability
Published Jun 14, 2014
·Updated
IBM PureApplication System 1.0 before 1.0.0.4 cfix8 and 1.1 before 1.1.0.4 IF1 allows remote authenticated users to bypass intended access restrictions by establishing an SSH session from a deployed virtual machine.
Affected Software
10 affected components
IBM PureApplication System=1.0.0.0
IBM PureApplication System=1.0.0.1
IBM PureApplication System=1.0.0.2
IBM PureApplication System=1.0.0.3
IBM PureApplication System=1.0.0.4
IBM PureApplication System=1.1.0.0
IBM PureApplication System=1.1.0.1
IBM PureApplication System=1.1.0.2
IBM PureApplication System=1.1.0.3
IBM PureApplication System=1.1.0.4
Event History
Jun 14, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·11:18 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0960?
CVE-2014-0960 is considered to be of medium severity due to its potential for unauthorized access.
2
How do I fix CVE-2014-0960?
To fix CVE-2014-0960, upgrade to IBM PureApplication System version 1.0.0.4 cfix8 or 1.1.0.4 IF1 or later.
3
Who is affected by CVE-2014-0960?
CVE-2014-0960 affects IBM PureApplication System versions 1.0.0.0 through 1.0.0.4 and 1.1.0.0 through 1.1.0.4.
4
What kind of attack does CVE-2014-0960 allow?
CVE-2014-0960 allows remote authenticated users to bypass access restrictions through an SSH session.
5
Is there a workaround for CVE-2014-0960?
There is no official workaround for CVE-2014-0960; applying the official updates is recommended for mitigation.