CVE-2014-6120: Command Injection
First published: Thu Apr 12 2018(Updated: )
IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow remote attackers to execute arbitrary commands on the installation server via unspecified vectors. IBM X-Force ID: 96721.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HCL AppScan Source | =8.0.0.0 | |
| HCL AppScan Source | =8.0.0.1 | |
| HCL AppScan Source | =8.0.0.2 | |
| HCL AppScan Source | =8.5.0.0 | |
| HCL AppScan Source | =8.5.0.1 | |
| IBM Security AppScan | =8.6.0.0 | |
| IBM Security AppScan | =8.6.0.1 | |
| IBM Security AppScan | =8.6.0.2 | |
| IBM Security AppScan | =8.7 | |
| IBM Security AppScan | =8.7.0.1 | |
| IBM Security AppScan | =8.8 | |
| IBM Security AppScan | =9.0.0.0 | |
| IBM Security AppScan | =9.0.0.1 | |
| IBM Security AppScan | =9.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-6120?
CVE-2014-6120 has a high severity rating due to its potential for remote command execution.
How do I fix CVE-2014-6120?
To fix CVE-2014-6120, upgrade to a patched version of IBM Rational AppScan Source or Security AppScan Source as specified in the vendor's advisory.
Which versions are affected by CVE-2014-6120?
CVE-2014-6120 affects IBM Rational AppScan Source versions 8.0 through 9.0.1 and Security AppScan Source versions 8.6 through 9.0.1.
What kind of attacks can exploit CVE-2014-6120?
CVE-2014-6120 allows remote attackers to execute arbitrary commands on the installation server, leading to potential system compromise.
Is there a workaround for CVE-2014-6120?
There is no official workaround for CVE-2014-6120 other than applying the necessary updates to vulnerable software.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/hcl appscan source
- version/hcl appscan source/8.0.0.0
- version/hcl appscan source/8.0.0.1
- version/hcl appscan source/8.0.0.2
- version/hcl appscan source/8.5.0.0
- version/hcl appscan source/8.5.0.1
- canonical/ibm security appscan
- version/ibm security appscan/8.6.0.0
- version/ibm security appscan/8.6.0.1
- version/ibm security appscan/8.6.0.2
- version/ibm security appscan/8.7
- version/ibm security appscan/8.7.0.1
- version/ibm security appscan/8.8
- version/ibm security appscan/9.0.0.0
- version/ibm security appscan/9.0.0.1
- version/ibm security appscan/9.0.1