CVE-2014-3079

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-09-10 · updated 2026-06-17
Weakness: CWE-264

Description

The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4.x before 8.1.4.4 allows remote authenticated users to bypass authorization checks and visit unspecified URLs with license-usage data via a DESCRIBE clause in a SPARQL query.

Affected products

IBM Rational License Key Server: 8.1.4, 8.1.4.2, 8.1.4.3

References

http://secunia.com/advisories/60709
http://secunia.com/advisories/61071
http://www-01.ibm.com/support/docview.wss?uid=swg21681449
http://www-01.ibm.com/support/docview.wss?uid=swg21682627
http://www-01.ibm.com/support/docview.wss?uid=swg24038045
http://www.securityfocus.com/bid/69643
https://exchange.xforce.ibmcloud.com/vulnerabilities/93912
http://secunia.com/advisories/60709
http://secunia.com/advisories/61071
http://www-01.ibm.com/support/docview.wss?uid=swg21681449
http://www-01.ibm.com/support/docview.wss?uid=swg21682627
http://www-01.ibm.com/support/docview.wss?uid=swg24038045

Get alerted when CVE-2014-3079 or the next vulnerability affects your stack