CVE-2014-6119

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix…

published December 23, 2014

CVSS
—
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

⚠️ A crafted executable hiding in an archive could be your digital gremlin! This vulnerability in IBM Security AppScan lets attackers execute arbitrary code, which is a sneaky way to gain control! Think of it like finding a surprise ingredient in your favorite takeout — you open the box, and there’s something that doesn’t belong, possibly leading to a stomachache! In this case, attackers can slip in malicious code through seemingly normal files and cause chaos. If an attacker successfully exploits this vulnerability, they could run any code on the vulnerable system, potentially leading to data theft, system compromise, or even a full takeover. It's like giving someone access to your kitchen, and they decide to rearrange everything — or worse, toss out your dinner!

Put simply

Think of it like finding a surprise ingredient in your favorite takeout — you open the box, and there’s something that doesn’t belong, possibly leading to a stomachache! In this case, attackers can slip in malicious code through seemingly normal files and cause chaos. This vulnerability affects several versions of IBM Security AppScan, allowing remote attackers to execute arbitrary code via specially crafted executable files within an archive. Essentially, the program does not adequately check the contents of an archive before executing it, leading to unauthorized actions.

What to do

If an attacker successfully exploits this vulnerability, they could run any code on the vulnerable system, potentially leading to data theft, system compromise, or even a full takeover. It's like giving someone access to your kitchen, and they decide to rearrange everything — or worse, toss out your dinner! Update IBM Security AppScan to versions 8.5 IFix 002 or later, 8.6 IFix 004 or later, 8.7 IFix 004 or later, 8.8 iFix 003 or later, 9.0.0.1 iFix 003 or later, or 9.0.1 iFix 001. Regularly audit your software and ensure all dependencies are up to date for the best defense! You've got this! With the right updates, you'll be back in control of your digital kitchen in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03626 · 89.5th percentile
Published
2014-12-23T02:00Z
EPSS history
Timeline
  • 23 DEC 02:00Z
    IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix…
    cvelistv5