Unscored CVE-2014-6122 EUVD-2014-6008GHSA-hp43-2xcx-39hv

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 bef…

Published Dec 23, 2014 · Updated Aug 6, 2024 · Assigned by ibm

Description

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote authenticated users to write to arbitrary folders, and consequently execute arbitrary commands, via a modified argument.

References

1031427 vdb-entry
ibm-appscan-cve20146122-sec-bypass(96723) vdb-entry
http://www-01.ibm.com/support/docview.wss?uid=swg21693035