CVE-2014-3054: Medium severity ibm websphere portal vulnerability

Published Jul 29, 2014

Updated

Multiple open redirect vulnerabilities in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected Software

44 affected components

IBM WebSphere Portal=7.0.0.0

IBM WebSphere Portal=7.0.0.1-cf003

IBM WebSphere Portal=7.0.0.1-cf004

IBM WebSphere Portal=7.0.0.1-cf005

IBM WebSphere Portal=7.0.0.1-cf006

IBM WebSphere Portal=7.0.0.1-cf007

IBM WebSphere Portal=7.0.0.1-cf008

IBM WebSphere Portal=7.0.0.1-cf009

IBM WebSphere Portal=7.0.0.1-cf010

IBM WebSphere Portal=7.0.0.1-cf019

IBM WebSphere Portal=7.0.0.2

IBM WebSphere Portal=7.0.0.2-cf011

IBM WebSphere Portal=7.0.0.2-cf012

IBM WebSphere Portal=7.0.0.2-cf013

IBM WebSphere Portal=7.0.0.2-cf014

IBM WebSphere Portal=7.0.0.2-cf015

IBM WebSphere Portal=7.0.0.2-cf016

IBM WebSphere Portal=7.0.0.2-cf017

IBM WebSphere Portal=7.0.0.2-cf018

IBM WebSphere Portal=7.0.0.2-cf019

IBM WebSphere Portal=7.0.0.2-cf020

IBM WebSphere Portal=7.0.0.2-cf021

IBM WebSphere Portal=7.0.0.2-cf022

IBM WebSphere Portal=7.0.0.2-cf23

IBM WebSphere Portal=7.0.0.2-cf24

IBM WebSphere Portal=7.0.0.2-cf25

IBM WebSphere Portal=7.0.0.2-cf26

IBM WebSphere Portal=7.0.0.2-cf27

IBM WebSphere Portal=8.0.0.0

IBM WebSphere Portal=8.0.0.0-cf01

IBM WebSphere Portal=8.0.0.0-cf02

IBM WebSphere Portal=8.0.0.0-cf03

IBM WebSphere Portal=8.0.0.0-cf04

IBM WebSphere Portal=8.0.0.0-cf05

IBM WebSphere Portal=8.0.0.1

IBM WebSphere Portal=8.0.0.1-cf04

IBM WebSphere Portal=8.0.0.1-cf05

IBM WebSphere Portal=8.0.0.1-cf06

IBM WebSphere Portal=8.0.0.1-cf07

IBM WebSphere Portal=8.0.0.1-cf08

IBM WebSphere Portal=8.0.0.1-cf09

IBM WebSphere Portal=8.0.0.1-cf12

IBM Websphere Portal Unified Task List Portlet=6.0.1

Event History

Jul 29, 2014

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3054?

CVE-2014-3054 is classified as a medium severity vulnerability due to its potential to enable phishing attacks via open redirects.

How do I fix CVE-2014-3054?

To fix CVE-2014-3054, ensure that your IBM WebSphere Portal is updated to the latest release or apply any available official patches.

What systems are affected by CVE-2014-3054?

CVE-2014-3054 affects IBM WebSphere Portal versions 7.x and 8.x up to 8.0.0.1 CF12.

What type of vulnerability is CVE-2014-3054?

CVE-2014-3054 is an open redirect vulnerability that allows attackers to redirect users to malicious websites.

Can CVE-2014-3054 be exploited remotely?

Yes, CVE-2014-3054 can be exploited remotely by attackers to conduct phishing attacks.