What is the CVSS score of CVE-2014-6195?

CVE-2014-6195 has a CVSS 2.0 base score of 1.9 (Low). CVSS vector: AV:L/AC:M/Au:N/C:N/I:P/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2014-6195?

Yes, a patch is available for CVE-2014-6195. Update the affected software to the latest version immediately.

Java CVE-2014-6195

LOW

Improper Access Control (CWE-284)

2015-02-14 psirt@us.ibm.com

Microsoft Java IBM Authentication Bypass Tivoli Storage Manager

1.9

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

AV:L/AC:M/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:N/I:P/A:N

Attack Vector

Local

Attack Complexity

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Feb 14, 2015 - 02:59 cve.org

LOW 1.9

DescriptionCVE.org

The (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on AIX, Linux, and Solaris; 5.4.x and 5.5.x on Windows and z/OS; 6.1 before 6.1.5.7 on z/OS; 6.1 and 6.2 before 6.2.5.2 on Windows, before 6.2.5.3 on AIX and Linux x86, and before 6.2.5.4 on Linux Z and Solaris; 6.3 before 6.3.2.1 on AIX, before 6.3.2.2 on Windows, and before 6.3.2.3 on Linux; 6.4 before 6.4.2.1; and 7.1 before 7.1.1 in IBM TSM for Mail, when the Data Protection for Lotus Domino component is used, allow local users to bypass authentication and restore a Domino database or transaction-log backup via unspecified vectors.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-284. The (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on AIX, Linux, and Solaris; 5.4.x and 5.5.x on Windows and z/OS; 6.1 before 6.1.5.7 on z/OS; 6.1 and 6.2 before 6.2.5.2 on Windows, before 6.2.5.3 on AIX and Linux x86, and before 6.2.5.4 on Linux Z and Solaris; 6.3 before 6.3.2.1 on AIX, before 6.3.2.2 on Windows, and before 6.3.2.3 on Linux; 6.4 before 6.4.2.1; and 7.1 before 7.1.1 in IBM TSM for Mail, when the Data Protection for Lotus Domino component is used, allow local users to bypass authentication and restore a Domino database or transaction-log backup via unspecified vectors. Affected products include: Ibm Tivoli Storage Manager. Version information: before 5.5.4.4.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.