CVE-2014-0888 (GCVE-0-2014-0888)

Vulnerability from cvelistv5 – Published: 2014-08-29 10:00 – Updated: 2024-08-06 09:27
VLAI
Summary
IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
ibm
References
Date Public
2014-08-26 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:27:20.266Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682798"
          },
          {
            "name": "ibm-worklight-cve20140888-tamper(91239)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91239"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-08-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682798"
        },
        {
          "name": "ibm-worklight-cve20140888-tamper(91239)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91239"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@us.ibm.com",
          "ID": "CVE-2014-0888",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www-01.ibm.com/support/docview.wss?uid=swg21682798",
              "refsource": "CONFIRM",
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21682798"
            },
            {
              "name": "ibm-worklight-cve20140888-tamper(91239)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/91239"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2014-0888",
    "datePublished": "2014-08-29T10:00:00.000Z",
    "dateReserved": "2014-01-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T09:27:20.266Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2014-0888",
      "date": "2026-07-29",
      "epss": "0.00961",
      "percentile": "0.58013"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2014-0888\",\"sourceIdentifier\":\"psirt@us.ibm.com\",\"published\":\"2014-08-29T09:55:07.400\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"IBM Worklight Foundation 5.x and 6.x before 6.2.0.0, as used in Worklight and Mobile Foundation, allows remote authenticated users to bypass the application-authenticity feature via unspecified vectors.\"},{\"lang\":\"es\",\"value\":\"IBM Worklight Foundation 5.x y 6.x anterior a 6.2.0.0, utilizado en Worklight y Mobile Foundation, permite a usuarios remotos autenticados evadir la funcionalidad de la autenticidad de aplicaciones a trav\u00e9s de vectores no especificados.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:S/C:N/I:P/A:P\",\"baseScore\":4.9,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":6.8,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.0.0:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"3F9F05EA-7931-4F33-8417-D19FD34E2F1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.0.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"9CD1B3B7-D5EE-43F5-8DA6-447B9E56A7C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.0.1:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"AD936CDC-4D7F-48E9-B26F-F7CB72D0D9AB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.0.1:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"A3392E0D-2488-4550-BE1C-D4A8AB8A3E29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.0.2:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"A2E64579-6536-4C1F-8797-464CFC48328C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.0.2:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"5C40F1B4-E55D-4E2A-B51E-BCC3680D02D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.0.3:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"BBFF3A56-2304-4AC3-8240-8695DB83B7A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.0.3:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"AF626B88-17B4-48C3-B2B5-4425DD6C4C93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.5.0:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"DDFC15E8-309B-4628-9433-07A728D9F44F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.5.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"A71F0E5E-F422-47B3-96CF-CF345947D822\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.5.1:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"77C0B96B-4D6B-44F2-8699-5A4F22B247CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.5.1:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"B8F47A1A-350F-4FF1-B357-6ECD6EFBA5A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.6.0:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"D54DB742-01A0-45B4-9C82-F92B5FC8CE9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.6.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"248DF8E8-BB46-4AFF-B146-D55BAD98FFEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.6.1:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"BFB1B485-9DA1-4185-B25B-21D741924A2E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.6.1:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"098BA964-4D6A-4836-B6BE-874206183B1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.6.2:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"990A341A-72C8-43C9-A265-90B92A5D850A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:5.0.6.2:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"607A2E4D-8B96-405F-93E0-3AF1F313665E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:6.0.0.0:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"D346CCB1-1832-4E8B-AB8E-ADB6547563F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:6.0.0.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"E6383639-CEFB-4797-A037-CDD36354D2DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:6.0.0.1:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"36D2CE94-5B4E-43AC-B296-48AE7F0636CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:6.0.0.1:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"B1C0C058-B3D0-42A2-8A53-2DD21B901ECF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:6.0.0.2:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"4C5BCF31-7DA3-45BD-9F36-A4D5C93EB3C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:6.0.0.2:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"370F11B6-B9ED-4933-8DCA-EDC99618D7E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:6.1.0.0:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"A37AE292-CF9A-4F70-AFAD-C8867ADA6C68\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:6.1.0.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"92052A11-0AA8-45C0-B748-7144863C4C48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:6.1.0.1:*:*:*:consumer:*:*:*\",\"matchCriteriaId\":\"60530569-E8E0-4EDB-B7B8-48195E6448FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:worklight:6.1.0.1:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"71B306B8-7E88-49A6-919C-0B66B04510A1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:5.0.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26428E09-D30F-40E9-8DBD-3FDD39304D47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:5.0.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1BEF8C29-EC0C-4A06-A814-6DB22A74E0DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:5.0.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"587016CF-7370-4EA6-80DC-488E4379D185\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:5.0.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4CDC21F-489B-4743-BB93-248C8E966DEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:5.0.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBF0C404-5A25-4B65-B654-C05D70767F9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:5.0.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AFC801DB-92C7-41F9-9218-7F0148DD81A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:5.0.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F1734D4-9EFE-4213-9E9E-6F31B56F0FB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:5.0.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"13F097F4-0B7E-40CC-B54B-A133B379B1A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:5.0.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE1A0FA1-ACD1-4AEC-B197-33B4210C5CBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:6.0.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1810E86A-B967-45AE-ABB9-C68DC48EDAE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:6.0.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C359A92-B2AF-4EE9-AA3D-1FA630098609\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:6.0.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8415C002-AFC0-4A60-87A4-8EEF7C8D27C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:6.1.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6099F6E0-1DB3-40F5-A2A8-B4D11BC67FF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ibm:mobile_foundation:6.1.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F555213-7572-41A2-941F-C6CE9D784B71\"}]}]}],\"references\":[{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21682798\",\"source\":\"psirt@us.ibm.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/91239\",\"source\":\"psirt@us.ibm.com\"},{\"url\":\"http://www-01.ibm.com/support/docview.wss?uid=swg21682798\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/91239\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.