CVE-2014-0624
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
EMC RSA Data Loss Prevention（DLP）是美国易安信（EMC）公司的一款数据丢失防护产品。该产品用于发现和监控敏感数据（如客户信用卡数据、员工PII或公司知识产权）的位置和流，并提供用户培训、数据分类和数据保护等功能。 EMC RSA DLP 9.0，9.5，9.6版本中存在安全漏洞，该漏洞源于程序没有正确管理会话。远程攻击者可利用该漏洞获取权限，绕过既定的内容读取限制。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2014-0624
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
EMC RSA Data Loss Prevention (DLP) 9.x before 9.6-SP2 does not properly manage sessions, which allows remote authenticated users to gain privileges and bypass intended content-reading restrictions via unspecified vectors.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
EMC RSA Data Loss Prevention 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EMC RSA Data Loss Prevention（DLP）是美国易安信（EMC）公司的一款数据丢失防护产品。该产品用于发现和监控敏感数据（如客户信用卡数据、员工PII或公司知识产权）的位置和流，并提供用户培训、数据分类和数据保护等功能。 EMC RSA DLP 9.0，9.5，9.6版本中存在安全漏洞，该漏洞源于程序没有正确管理会话。远程攻击者可利用该漏洞获取权限，绕过既定的内容读取限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2014-0624
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-0624
请登录查看更多情报信息。
Mailing List Discussions for CVE-2014-0624 (1)
Same Patch Batch · n/a · 2014-03-06 · 29 CVEs total
| CVE-2013-6720 | IBM Tealeaf CX 目录遍历漏洞 | |
| CVE-2014-1911 | Foscam FI8910W Camera 安全漏洞 | |
| CVE-2014-0890 | IBM Sametime 安全漏洞 | |
| CVE-2014-0707 | Cisco Wireless LAN Controller 拒绝服务漏洞 | |
| CVE-2014-0706 | Cisco Wireless LAN Controller 拒绝服务漏洞 | |
| CVE-2014-0705 | Cisco Wireless LAN Controller 拒绝服务漏洞 | |
| CVE-2014-0704 | Cisco Wireless LAN Controller 拒绝服务漏洞 | |
| CVE-2014-0703 | Cisco Wireless LAN Controller 竞争条件漏洞 | |
| CVE-2014-0701 | Cisco Wireless LAN Controller 资源管理错误漏洞 | |
| CVE-2014-0683 | Cisco Small Business Router 密码泄露漏洞 | |
| CVE-2014-0630 | EMC Documentum TaskSpace 权限许可和访问控制漏洞 | |
| CVE-2014-0629 | EMC Documentum TaskSpace 权限许可和访问控制漏洞 | |
| CVE-2014-0336 | Serena Dimensions CM 跨站请求伪造漏洞 | |
| CVE-2014-0335 | Serena Dimensions CM 多个跨站脚本漏洞 | |
| CVE-2009-5138 | GnuTLS Certificate Validation 安全绕过漏洞 | |
| CVE-2013-6719 | IBM Tealeaf CX 操作系统命令注入漏洞 | |
| CVE-2013-6315 | IBM InfoSphere Enterprise Records和Enterprise Records 输入验证漏洞 | |
| CVE-2013-6314 | IBM InfoSphere Enterprise Records和Enterprise Records 跨站脚本漏洞 | |
| CVE-2013-6304 | IBM Algo One Algo Risk Application 目录遍历漏洞 | |
| CVE-2013-6201 | HP Security Management System 安全漏洞 |
Showing top 20 of 29 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2014-0624
No comments yet