CVE-2014-4746: Infoleak
IBM WebSphere Portal 8.0.0 before 8.0.0.1 CF13 and 8.5.0 through CF01 provides different error codes for firewall-traversal requests depending on whether the intranet host exists, which allows remote attackers to map the intranet network via a series of requests.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4746?
CVE-2014-4746 is considered a medium severity vulnerability as it allows attackers to map intranet networks.
How do I fix CVE-2014-4746?
To mitigate CVE-2014-4746, ensure you apply the latest updates for IBM WebSphere Portal including version 8.0.0.1 CF13 or 8.5.0 beyond CF01.
What versions of IBM WebSphere Portal are affected by CVE-2014-4746?
CVE-2014-4746 affects IBM WebSphere Portal versions 8.0.0.0 and 8.5.0.0.
What types of attacks does CVE-2014-4746 enable?
CVE-2014-4746 enables remote attackers to perform network mapping attacks by exploiting different error codes.
Is CVE-2014-4746 exploitable from the internet?
Yes, CVE-2014-4746 can be exploited by remote attackers over the internet if the vulnerability is present in the affected versions of the software.