CVE-2014-3064

2014-07-1905:09:27

CWE-200

[email protected]

web.nvd.nist.gov

ibm

infosphere

mdm

collaborative edition

server

pim

security

vulnerability

cve-2014-3064

file access

unix

6.2 Medium

AI Score

Confidence

Low

6.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

46.2%

JSON

The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to read arbitrary files via a crafted UNIX file parameter.

Affected configurations

NVD

Node

ibminfosphere_master_data_management_collaboration_serverMatch10.0

ibminfosphere_master_data_management_collaboration_serverMatch10.1

ibminfosphere_master_data_management_collaboration_serverMatch11.0

ibminfosphere_master_data_management_server_for_product_information_managementMatch9.0

ibminfosphere_master_data_management_server_for_product_information_managementMatch9.1

CPENameOperatorVersion
ibm:infosphere_master_data_management_collaboration_serveribm infosphere master data management collaboration servereq10.0
ibm:infosphere_master_data_management_collaboration_serveribm infosphere master data management collaboration servereq10.1
ibm:infosphere_master_data_management_collaboration_serveribm infosphere master data management collaboration servereq11.0
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq9.0
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq9.1

CPE	Name	Operator	Version
ibm:infosphere_master_data_management_collaboration_server	ibm infosphere master data management collaboration server	eq	10.0
ibm:infosphere_master_data_management_collaboration_server	ibm infosphere master data management collaboration server	eq	10.1
ibm:infosphere_master_data_management_collaboration_server	ibm infosphere master data management collaboration server	eq	11.0
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	9.0
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	9.1