CVE-2014-6119

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote attackers to execute arbitrary code via a crafted executable file in an archive.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:security_appscan:8.5:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan:8.6:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan:8.7:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan:8.8:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan:9.0:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan:9.0.0.1:*:*:*:enterprise:*:*:*
cpe:2.3:a:ibm:security_appscan_source:9.0.1:*:*:*:enterprise:*:*:*

History

No history.

Information

Published : 2014-12-23 02:59

Updated : 2024-02-04 18:35


NVD link : CVE-2014-6119

Mitre link : CVE-2014-6119

CVE.ORG link : CVE-2014-6119


JSON object : View

Products Affected

ibm

  • security_appscan_source
  • security_appscan
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')