NVD

Id
33736  
Name
CVE-2014-6158  
Description
Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication System 1.0 before 1.0.0.4 iFix 10, 1.1 before 1.1.0.5, and 2.0 before 2.0.0.1 and Workload Deployer 3.1.0.7 before IF5 allow remote authenticated users to execute arbitrary code via a (1) Script Package, (2) Add-On, or (3) Emergency Fixes component.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-01-09  
Modified Date
2017-01-02  
Seq
2014-6158  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175153 33736 CVE-2014-6158 61956  View
175154 33736 CVE-2014-6158 62032  View
175155 33736 CVE-2014-6158 http://www-01.ibm.com/support/docview.wss?uid=swg21693292  View
175156 33736 CVE-2014-6158 http://www-01.ibm.com/support/docview.wss?uid=swg21693440  View
175157 33736 CVE-2014-6158 ibm-pas-cve20146158-traversal(97707)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18705 JVNDB-2014-007580 IBM PureApplication System および Workload Deployer の file-upload 機能におけるディレクトリトラバーサルの脆弱性 IBM PureApplication System および Workload Deployer の file-upload 機能には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-6158 73449 CVE-2014-6158 33736 9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007580.html 2014-12-15 2015-01-14 View