NVD

Id
33734  
Name
CVE-2014-6154  
Description
Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for DB2 5.1 through 5.3.1 on Linux, UNIX, and Windows allows remote attackers to access arbitrary files via a .. (dot dot) in a URL.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-02-12  
Modified Date
2015-04-13  
Seq
2014-6154  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175145 33734 CVE-2014-6154 http://www-01.ibm.com/support/docview.wss?uid=swg21696000  View
175146 33734 CVE-2014-6154 ibm-optim-cve20146154-directory-traversal(97677)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19017 JVNDB-2014-007892 複数の OS 上で稼動する DB2 用 IBM Optim Performance Manager および IBM InfoSphere Optim Performance Manager におけるディレクトリトラバーサルの脆弱性 Linux、UNIX、および Windows 上で稼動する DB2 用 IBM Optim Performance Manager および IBM InfoSphere Optim Performance Manager には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-6154 73445 CVE-2014-6154 33734 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007892.html 2014-09-02 2015-02-18 View