Vulnerability Details : CVE-2011-1367
Unspecified vulnerability in the File Load feature in IBM Rational AppScan Standard and Express 7.8.x, 7.9.x, and 8.0.x before 8.0.0.3 allows remote attackers to execute arbitrary commands via a crafted .scan file.
Products affected by CVE-2011-1367
- cpe:2.3:a:ibm:rational_appscan:7.9.0.3:*:enterprise:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.9.0.2:*:enterprise:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:8.0.0.2:*:enterprise:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.8.0.2:*:enterprise:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.8.0.1:*:enterprise:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:8.0.0:*:enterprise:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.9.0.1:*:enterprise:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.8.0:*:enterprise:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:8.0.0.1:*:enterprise:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.9.0:*:enterprise:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:8.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:8.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.9.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.9.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.9.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:7.8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_appscan:8.0.0.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2011-1367
0.92%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 81 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2011-1367
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
References for CVE-2011-1367
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/70044
Rational Appscan scan file code execution CVE-2011-1367 Vulnerability Report
-
http://www.securityfocus.com/bid/49989
IBM Rational AppScan '.scan' file Remote Command Execution Vulnerability
-
http://www-01.ibm.com/support/docview.wss?uid=swg21515110
IBM notice: The page you requested cannot be displayed
Jump to