CVE-2014-4749
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2014-4749
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
IBM PowerVC 1.2.0 before FixPack3 does not properly use the known_hosts file, which allows man-in-the-middle attackers to spoof SSH servers via an arbitrary server key.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM PowerVC 权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM PowerVC是美国IBM公司的一套虚拟化管理解决方案。该方案支持虚拟系统管理、虚拟图像管理和部署、以及虚拟工作负载管理等。 IBM PowerVC FixPack3之前1.2.0版本中存在安全漏洞，该漏洞源于程序没有正确使用‘known_hosts’文件。攻击者可借助任意服务器的密钥利用该漏洞实施中间人攻击，伪造数据，欺骗SSH服务器。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2014-4749
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-4749
请登录查看更多情报信息。
- http://www-01.ibm.com/support/docview.wss?uid=nas8N1020224x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2014-4749
Same Patch Batch · n/a · 2014-08-20 · 18 CVEs total
| CVE-2014-2517 | EMC RSA Archer GRC Platform 安全漏洞 | |
| CVE-2014-4750 | IBM PowerVC Express Edition 信息泄露漏洞 | |
| CVE-2014-4618 | EMC Documentum Content Server 权限许可和访问控制漏洞 | |
| CVE-2014-3514 | Ruby on Rails Active Record‘create_with()’权限许可和访问控制漏洞 | |
| CVE-2014-3340 | Cisco WebEx MeetMeNow 目录遍历漏洞 | |
| CVE-2014-3331 | Cisco ASR 5000 Series Software Packet Data Network Gateway 拒绝服务漏洞 | |
| CVE-2014-2521 | EMC Documentum Content Server 信息泄露漏洞 | |
| CVE-2014-2520 | EMC Documentum Content Server 权限许可和访问控制漏洞 | |
| CVE-2014-2518 | EMC Documentum WDK 跨站请求伪造漏洞 | |
| CVE-2014-2524 | GNU Readline‘_rl_tropen()’安全漏洞 | |
| CVE-2014-2515 | EMC Documentum D2 权限许可和访问控制漏洞 | |
| CVE-2014-2511 | EMC Documentum WebTop 跨站脚本漏洞 | |
| CVE-2014-2505 | EMC RSA Archer GRC Platform 安全漏洞 | |
| CVE-2014-0641 | EMC RSA Archer GRC Platform 跨站请求伪造漏洞 | |
| CVE-2014-0640 | EMC RSA Archer GRC Platform 权限许可和访问控制漏洞 | |
| CVE-2014-5382 | Schrack Technik microControl 跨站脚本漏洞 | |
| CVE-2014-4929 | OwnCloud Server 目录遍历漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2014-4749
No comments yet