Description
The charting component in IBM WebSphere Dashboard Framework (WDF) 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21663022
- LO78265 vendor-advisory
- LO78266 vendor-advisory
- ibm-websphere-cve20136728-file-access(89283) vdb-entry