CVE-2014-6154

EUVD-2014-6040
Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for DB2 5.1 through 5.3.1 on Linux, UNIX, and Windows allows remote attackers to access arbitrary files via a .. (dot dot) in a URL.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
Affected Products (NVD)
VendorProductVersion
ibmoptim_performance_manager
4.1.1
ibmoptim_performance_manager
4.1.1.1
ibmoptim_performance_manager
5.1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg21696000
https://exchange.xforce.ibmcloud.com/vulnerabilities/97677
http://www-01.ibm.com/support/docview.wss?uid=swg21696000
https://exchange.xforce.ibmcloud.com/vulnerabilities/97677