Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 11/06/2014 Updated: 12/06/2014

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote malicious users to execute arbitrary commands via a (1) auth, (2) auth_session, (3) auth_simple, (4) add, (5) add_flat, (6) remove, (7) set_pwd, (8) add_permissions, (9) revoke_permissions, (10) runAsync, or (11) tsmRequest command.

Vulnerable Product	Search on Vulmon	Subscribe to Product
rocketsoftware rocket servergraph -

CWE-94 http://www.zerodayinitiative.com/advisories/ZDI-14-164/http://www.securityfocus.com/bid/67780 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-3915

Vulnerability Summary

References

Vulmon Search

About

Products

Connect