Security Bulletin: File path traversal vulnerability affecting IBM Business Process Manager Process Center (CVE-2014-6182)

Summary An export function in IBM Business Process Manager Process Center is vulnerable to file path traversal. As a result, sensitive files might be downloaded. Vulnerability Details CVE-ID: CVE-2014-6182 Description: IBM Business Process Manager could allow a remote attacker to traverse...

PT-2014-7091

Name of the Vulnerable Software and Affected Versions IBM Business Process Manager BPM versions 8.0.x through 8.0.1.3 IBM Business Process Manager BPM versions 8.5.x through 8.5.5 Description A directory traversal issue exists in the export function of the Process Center, allowing remote...

CVE-2014-6182: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in an export function in the Process Center in IBM Business Process Manager BPM 8.0.x through 8.0.1.3 and 8.5.x through 8.5.5 allows remote authenticated users to read arbitrary files via a .. dot dot in a URL...