CVE-2014-0862 Code injection in n/a
Remote attackers can execute arbitrary code on IBM Rational Collaborative Lifecycle Management servers via unspecified vectors.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- Available
What is CVE-2014-0862?
CVE-2014-0862 is a critical code injection vulnerability in Ibm Rational Collaborative Lifecycle Management, published on 2 Mar 2014. It can be exploited over the network.
Official description
Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code via unknown vectors.
Which versions are affected by CVE-2014-0862?
It affects 1 product.
Products include Ibm Rational Collaborative Lifecycle Management.
How do I fix CVE-2014-0862?
Apply the vendor's patch.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2014-0862 being exploited?
There is no known exploitation of CVE-2014-0862 in the wild and no public exploit code.
Other vulnerabilities in Ibm Rational Collaborative Lifecycle Management
- CVE-2017-1701 Weak cryptography in Rational Team Concert
- CVE-2016-0326 Command injection in n/a
- CVE-2016-9707 XML external entity in Rational Collaborative Lifecycle Management
- CVE-2015-7440 Privilege escalation in n/a
- CVE-2016-2981 Information disclosure in Rational Collaborative Lifecycle Management
All Ibm Rational Collaborative Lifecycle Management vulnerabilities
Sources
Also known as GHSA-mc86-9rhv-vp7f.