CVE-2014-0848
Last modified
CVE-2014-0848 is a vulnerability of currently unknown severity. The (1) ssl.conf and (2) httpd.conf files in the Apache HTTP Server component in IBM Netezza Performance Portal 2.0 before 2.0.0.4 have weak SSLCipherSuite values, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.. EPSS estimates a 0.85% chance of exploitation in the next 30 days.
Description
The (1) ssl.conf and (2) httpd.conf files in the Apache HTTP Server component in IBM Netezza Performance Portal 2.0 before 2.0.0.4 have weak SSLCipherSuite values, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Netezza Performance Portal | 2.0.0.0 |
| Ibm | Netezza Performance Portal | 2.0.0.1 |
| Ibm | Netezza Performance Portal | 2.0.0.2 |
| Ibm | Netezza Performance Portal | 2.0.0.3 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-0848?
How severe is CVE-2014-0848?
How do I fix CVE-2014-0848?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-0841IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6…
- CVE-2014-0842The account-creation functionality in IBM Rational Focal Poi…
- CVE-2014-0843Cross-site scripting (XSS) vulnerability in IBM Rational Foc…
- CVE-2014-0844Unspecified vulnerability in IBM Rational Requirements Compo…
- CVE-2014-0845Open redirect vulnerability in IBM Rational Requirements Com…
- CVE-2014-0846Cross-site scripting (XSS) vulnerability in IBM Rational Req…
- CVE-2014-0849IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and S…
- CVE-2014-0850Cross-site scripting (XSS) vulnerability in IBM InfoSphere M…
- CVE-2014-0852IBM WebSphere DataPower SOA appliances through 4.0.2.15, 5.x…
- CVE-2014-0853Multiple cross-site scripting (XSS) vulnerabilities in the (…
- CVE-2014-0854The server in IBM Cognos Business Intelligence (BI) 8.4.1, 1…
- CVE-2014-0855Multiple cross-site scripting (XSS) vulnerabilities in IBM C…
Are you affected by CVE-2014-0848?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST