Unscored CVE-2014-6182 EUVD-2014-6068GHSA-88x4-9cj9-9453

Directory traversal vulnerability in an export function in the Process Center in IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3 a…

Published Dec 17, 2014 · Updated Aug 6, 2024 · Assigned by ibm

Description

Directory traversal vulnerability in an export function in the Process Center in IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3 and 8.5.x through 8.5.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.

References

1031379 vdb-entry
http://www.ibm.com/support/docview.wss?uid=swg21692540
JR51234 vendor-advisory
ibm-bpm-cve20146182-traversal(98518) vdb-entry