CVE-2014-0931 XML external entity in n/a

What is CVE-2014-0931?

CVE-2014-0931 is a critical vulnerability in n/a, published on 20 Apr 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scripts, (3) CMAPI Java interface, (4) ClearCase remote client, and (5) CMI and OSLC-based ClearQuest integrations components in IBM Rational ClearCase 7.1.0.x, 7.1.1.x, 7.1.2 through 7.1.2.13, 8.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92263.

Weakness: CWE-611

Which versions are affected by CVE-2014-0931?

It affects 1 product.

Products include Ibm Rational Clearcase.

How do I fix CVE-2014-0931?

No fix has been published for CVE-2014-0931 yet. Limit exposure of the affected software until one is available.

Is CVE-2014-0931 being exploited?

There is no known exploitation of CVE-2014-0931 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2014-6221 Weak cryptography in n/a Critical 9.4
• CVE-2019-4059 Hardcoded credentials in Rational ClearCase High 7.5
• CVE-2015-5039 Security feature bypass in n/a High 7.4
• CVE-2013-5415 Memory corruption in n/a High 7.2
• CVE-2013-5416 Privilege escalation in n/a High 7.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-f2rh-8rx8-q57q.