Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2014-3045

EPSS 0.05% · P16
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-3045

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
IBM Scale Out Network Attached Storage (SONAS) 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the shell history upon use of the -p option to chuser, which allows local users to obtain sensitive information by leveraging root access.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Scale Out Network Attached Storage 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Scale Out Network Attached Storage(SONAS)是美国IBM公司的一款横向扩展网络连接存储设备,它提供云存储、数据保护和病毒防护等功能。 IBM SONAS 1.4.3.2及之前的版本中存在安全漏洞,该漏洞源于程序使用-p参数时,shell命令历史中记录管理员密码。本地攻击者可借助root权限利用该漏洞获取敏感信息。本地攻击者可借助root访问权限利用该漏洞获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2014-3045

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-3045

登录查看更多情报信息。

Same Patch Batch · n/a · 2014-07-19 · 15 CVEs total

CVE-2014-4331OctavoCMS 跨站脚本漏洞
CVE-2012-2682Red Hat Enterprise MRG Cumin 输入验证错误漏洞
CVE-2014-2519EMC RecoverPoint Appliance 配置错误漏洞
CVE-2014-3325Cisco Unified Customer Voice Portal 跨站脚本漏洞
CVE-2014-3532Red Hat dbus 拒绝服务漏洞
CVE-2014-3533Red Hat D-Bus 拒绝服务漏洞
CVE-2014-4943Linux kernel 权限许可和访问控制问题漏洞
CVE-2013-4273Drupal Entity API模块多个访问绕过漏洞
CVE-2013-7391Drupal Entity API 权限许可和访问控制漏洞
CVE-2014-0967IBM InfoSphere MDM - Collaborative Edition和IBM InfoSphere MDM Server for PIM 跨站脚本漏洞
CVE-2014-0968IBM InfoSphere MDM Server for PIM和IBM InfoSphere MDM - Collaborative Edition 跨站脚本漏洞
CVE-2014-0970IBM InfoSphere MDM Server for PIM和IBM InfoSphere MDM - Collaborative Edition 输入验证漏洞
CVE-2014-3043IBM Storwize V7000 Unified 权限许可和访问控制漏洞
CVE-2014-3064IBM InfoSphere MDM Server for PIM和IBM InfoSphere MDM - Collaborative Edition 信息泄露漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2014-3045

No comments yet


Leave a comment