CVE-2014-8115

2015-02-2016:00:00

redhat

www.cve.org

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

62.1%

JSON

The default authorization constrains in KIE Workbench 6.0.x allows remote authenticated users to read or write to arbitrary files, bypass intended access restrictions, and possibly have other unspecified impact via unknown vectors.

References

rhn.redhat.com/errata/RHSA-2015-0234.html

rhn.redhat.com/errata/RHSA-2015-0235.html

github.com/droolsjbpm/kie-wb-distributions/commit/90eed433d3