Remote Command Execution in IBM Security AppScan Enterprise

CVE-2014-6122

Summary

IBM Security AppScan Enterprise versions prior to certain IFix updates are vulnerable to an issue that permits remote authenticated users to write to arbitrary folders on the system. This flaw can be exploited by leveraging specially crafted arguments that compromise the application's functionality, leading to the execution of arbitrary commands. As a result, an attacker could potentially gain unauthorized access to sensitive data or execute malicious operations within the affected environment.

References