CVE-2014-6154

HIGH · 7.8 CVSS Gepubliceerd: 13-02-2015 CWE-22

Beschrijving

Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for DB2 5.1 through 5.3.1 on Linux, UNIX, and Windows allows remote attackers to access arbitrary files via a .. (dot dot) in a URL.

Vendors

Ibm Linux Microsoft

Affected products

Optim Performance Manager Linux Kernel Windows

References

www-01.ibm.com
exchange.xforce.ibmcloud.com