Security Bulletin: A security vulnerability has been identified in IBM Workload Deployer shipped with SmartCloud Orchestrator (CVE-2014-6158)

Summary IBM Workload Deployer is shipped as a component of IBM SmartCloud Orchestrator. Information about a security vulnerability affecting IBM Workload Deployer has been published in a security bulletin. Vulnerability Details Review security bulletin Security Bulletin: File path traversal...

Security Bulletin: File path traversal vulnerabilities affect IBM Workload Deployer shipped with IBM SmartCloud Orchestrator (CVE-2014-6158)

Summary File path traversal vulnerabilities affect IBM Workload Deployer, which is shipped with IBM SmartCloud Orchestrator CVE-2014-6158. Vulnerability Details Consult the Security Bulletin: File path traversal vulnerabilities affect IBM Workload Deployer CVE-2014-6158 document for vulnerability...

Security Bulletin: File path traversal vulnerabilities affect IBM PureApplication System (CVE-2014-6158)

Summary File upload functionality within IBM PureApplication System might lead to server compromise and Denial of Service DoS. Vulnerability Details CVEID: CVE-2014-6158 DESCRIPTION: IBM PureApplication System’s file upload functions might lead to server compromise and DoS when authorized users...

CVE-2014-6158

CVE-2014-6158 is a directory-traversal flaw affecting IBM PureApplication System (versions 1.0 up to 1.0.0.4 iFix 10; 1.1 up to 1.1.0.5; 2.0 up to 2.0.0.1) and IBM Workload Deployer (3.1.0.7 up to IF5). The vulnerability arises in the file-upload mechanism where authenticated users can manipulate...