Lucene search

[email protected]CVE-2014-6158

HistoryJan 10, 2015 - 2:59 a.m.

CVE-2014-6158

2015-01-1002:59:00

CWE-22

[email protected]

web.nvd.nist.gov

cve-2014-6158

directory traversal

ibm pureapplication system

file upload

remote code execution

nvd

7.3 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.7%

JSON

Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication System 1.0 before 1.0.0.4 iFix 10, 1.1 before 1.1.0.5, and 2.0 before 2.0.0.1 and Workload Deployer 3.1.0.7 before IF5 allow remote authenticated users to execute arbitrary code via a (1) Script Package, (2) Add-On, or (3) Emergency Fixes component.

CPENameOperatorVersion
ibm:pureapplication_systemibm pureapplication systemeq1.0.0.2
ibm:pureapplication_systemibm pureapplication systemeq1.1.0.0
ibm:pureapplication_systemibm pureapplication systemeq2.0.0.0
ibm:pureapplication_systemibm pureapplication systemeq1.1.0.1
ibm:pureapplication_systemibm pureapplication systemeq1.0.0.0
ibm:pureapplication_systemibm pureapplication systemeq1.0.0.1
ibm:pureapplication_systemibm pureapplication systemeq1.1.0.3
ibm:pureapplication_systemibm pureapplication systemeq1.0.0.3
ibm:pureapplication_systemibm pureapplication systemeq1.1.0.4
ibm:pureapplication_systemibm pureapplication systemeq1.1.0.2

CPE	Name	Operator	Version
ibm:pureapplication_system	ibm pureapplication system	eq	1.0.0.2
ibm:pureapplication_system	ibm pureapplication system	eq	1.1.0.0
ibm:pureapplication_system	ibm pureapplication system	eq	2.0.0.0
ibm:pureapplication_system	ibm pureapplication system	eq	1.1.0.1
ibm:pureapplication_system	ibm pureapplication system	eq	1.0.0.0
ibm:pureapplication_system	ibm pureapplication system	eq	1.0.0.1
ibm:pureapplication_system	ibm pureapplication system	eq	1.1.0.3
ibm:pureapplication_system	ibm pureapplication system	eq	1.0.0.3
ibm:pureapplication_system	ibm pureapplication system	eq	1.1.0.4
ibm:pureapplication_system	ibm pureapplication system	eq	1.1.0.2

Rows per page:

1-10 of 111

References

secunia.com/advisories/61956

secunia.com/advisories/62032

www-01.ibm.com/support/docview.wss?uid=swg21693292

www-01.ibm.com/support/docview.wss?uid=swg21693440

exchange.xforce.ibmcloud.com/vulnerabilities/97707

7.3 High

AI Score

Confidence

Low

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.7%

JSON

Related for CVE-2014-6158

ibm4 cvelist1 prion1