Unscored severity · published Jun 14, 2014
CVE-2014-0960
IBM PureApplication System 1.0 before 1.0.0.4 cfix8 and 1.1 before 1.1.0.4 IF1 allows remote authenticated users to bypass intended access restrictions by establishing an SSH…
–
CVSS
0.6%
EPSS
No
On KEV
Description
IBM PureApplication System 1.0 before 1.0.0.4 cfix8 and 1.1 before 1.1.0.4 IF1 allows remote authenticated users to bypass intended access restrictions by establishing an SSH session from a deployed virtual machine.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Pureapplication System · Ibm
1.0.0.0; 1.0.0.1; 1.0.0.2; 1.0.0.3; 1.0.0.4; 1.1.0.0; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0960
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0960
secunia.com
http://secunia.com/advisories/59254
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21675216
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/92743
More from Pureapplication System
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
8.8
CVE-2019-4224
IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection
7.8
CVE-2019-4241
IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local access to bypass authentication and obtain administrative access
7.5
CVE-2019-4235
IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user…