CVE

Id
73457  
CVE No.
CVE-2014-6158  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication System 1.0 before 1.0.0.4 iFix 10, 1.1 before 1.1.0.5, and 2.0 before 2.0.0.1 and Workload Deployer 3.1.0.7 before IF5 allow remote authenticated users to execute arbitrary code via a (1) Script Package, (2) Add-On, or (3) Emergency Fixes component.  
Phase
Assigned (20140902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
688385 73457 CVE-2014-6158 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21693292  View
688386 73457 CVE-2014-6158 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21693440  View
688387 73457 CVE-2014-6158 SECUNIA:61956  View
688388 73457 CVE-2014-6158 URL:http://secunia.com/advisories/61956  View
688389 73457 CVE-2014-6158 SECUNIA:62032  View
688390 73457 CVE-2014-6158 URL:http://secunia.com/advisories/62032  View
688391 73457 CVE-2014-6158 XF:ibm-pas-cve20146158-traversal(97707)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18430 JVNDB-2014-007305 IBM WebSphere Application Server および Feature Pack for CEA における任意のファイルを読まれる脆弱性 IBM WebSphere Application Server の Communications Enabled Applications (CEA) service、および Feature Pack for CEA には、任意のファイルを読まれる脆弱性が存在します。 CVE-2014-6166 73457 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007305.html  View