CVE-2014-0920

IBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1PI13527
http://www-01.ibm.com/support/docview.wss?uid=swg21669506	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/92073
http://www-01.ibm.com/support/docview.wss?uid=swg1PI13527
http://www-01.ibm.com/support/docview.wss?uid=swg21669506	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/92073

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:spss_analytic_server:1.0.0.0:::::::*
	cpe:2.3:a:ibm:spss_analytic_server:1.0.1.0:::::::*

History

21 Nov 2024, 02:03

Type	Values Removed	Values Added
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1PI13527 -~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1PI13527 -
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg21669506 - Vendor Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg21669506 - Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/92073 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/92073 -

Information

Published : 2014-04-10 23:55

Updated : 2024-11-21 02:03

NVD link : CVE-2014-0920

Mitre link : CVE-2014-0920

CVE.ORG link : CVE-2014-0920

JSON object : View

Products Affected

ibm

spss_analytic_server

CWE

CWE-255

Credentials Management Errors

{"id": "CVE-2014-0920", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-04-10T23:55:24.357", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PI13527", "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21669506", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/92073", "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PI13527", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21669506", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/92073", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "IBM SPSS Analytic Server 1.0 before IF002 and 1.0.1 before IF004 logs cleartext passwords, which allows remote authenticated users to obtain sensitive information via unspecified vectors."}, {"lang": "es", "value": "IBM SPSS Analytic Server 1.0 anterior a IF002 y 1.0.1 anterior a IF004 registra contrase\u00f1as en texto claro, lo que permite a usuarios remotos autenticados obtener informaci\u00f3n sensible a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T02:03:02.710", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:spss_analytic_server:1.0.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C741225-EAA4-4606-A38F-DCF6938EABD4"}, {"criteria": "cpe:2.3:a:ibm:spss_analytic_server:1.0.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7AE02DC-3705-4C3B-8B96-76333A9E775B"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}