CVE-2014-6155

2014-12-2411:59:03

CWE-22

[email protected]

web.nvd.nist.gov

ibm

wsrr

directory traversal

vulnerability

cve-2014-6155

nvd

ibm websphere service registry and repository

serviceregistry ui

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%

JSON

Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allow remote authenticated users to read arbitrary files via unspecified vectors.

Affected configurations

NVD

Node

ibmwebsphere_service_registry_and_repositoryMatch7.5.0.0

ibmwebsphere_service_registry_and_repositoryMatch7.5.0.1

ibmwebsphere_service_registry_and_repositoryMatch7.5.0.2

ibmwebsphere_service_registry_and_repositoryMatch7.5.0.3

ibmwebsphere_service_registry_and_repositoryMatch7.5.0.4

ibmwebsphere_service_registry_and_repositoryMatch8.0

ibmwebsphere_service_registry_and_repositoryMatch8.0.0.1

ibmwebsphere_service_registry_and_repositoryMatch8.0.0.2

ibmwebsphere_service_registry_and_repositoryMatch8.5

CPENameOperatorVersion
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq7.5.0.0
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq7.5.0.1
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq7.5.0.2
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq7.5.0.3
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq7.5.0.4
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq8.0
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq8.0.0.1
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq8.0.0.2
ibm:websphere_service_registry_and_repositoryibm websphere service registry and repositoryeq8.5

CPE	Name	Operator	Version
ibm:websphere_service_registry_and_repository	ibm websphere service registry and repository	eq	7.5.0.0
ibm:websphere_service_registry_and_repository	ibm websphere service registry and repository	eq	7.5.0.1
ibm:websphere_service_registry_and_repository	ibm websphere service registry and repository	eq	7.5.0.2
ibm:websphere_service_registry_and_repository	ibm websphere service registry and repository	eq	7.5.0.3
ibm:websphere_service_registry_and_repository	ibm websphere service registry and repository	eq	7.5.0.4
ibm:websphere_service_registry_and_repository	ibm websphere service registry and repository	eq	8.0
ibm:websphere_service_registry_and_repository	ibm websphere service registry and repository	eq	8.0.0.1
ibm:websphere_service_registry_and_repository	ibm websphere service registry and repository	eq	8.0.0.2
ibm:websphere_service_registry_and_repository	ibm websphere service registry and repository	eq	8.5