CVE-2014-3072 Privilege escalation in n/a

What is CVE-2014-3072?

CVE-2014-3072 is a high-severity vulnerability in n/a, published on 12 Aug 2014. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Unspecified vulnerability in the Automation Server in IBM Security AppScan Source 8 through 8.0.0.2, 8.5 through 8.5.0.1, 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, and 9.0 through 9.0.0.1 allows local users to gain privileges by executing a crafted service.

Which versions are affected by CVE-2014-3072?

It affects 1 product.

Products include Ibm Security Appscan Source.

How do I fix CVE-2014-3072?

No fix has been published for CVE-2014-3072 yet. Limit exposure of the affected software until one is available.

Is CVE-2014-3072 being exploited?

There is no known exploitation of CVE-2014-3072 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2012-2159 Open redirect in n/a Medium 5.8
• CVE-2016-3035 Information disclosure in AppScan Source Medium 5.3
• CVE-2012-2173 Information disclosure in n/a Medium 5.0
• CVE-2016-3034 Weak cryptography in AppScan Source Medium 4.4
• CVE-2014-0936 Information disclosure in n/a Medium 4.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-87x9-22px-54rx.