Description
Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL.
References
- PI14125 vendor-advisory
- 67340 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21670753
- ibm-iehs-cve20140918-traversal(91980) vdb-entry