PT-2015-4114 · Ibm · Ibm Tririga Application Platform

Publicado

2015-01-29

·

Atualizado

2017-09-08

·

CVE-2014-8895

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.2.1.x through 3.3.2 before 3.3.2.3 IBM TRIRIGA Application Platform versions 3.4.1 before 3.4.1.1
Description The issue allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.
Recommendations For versions 3.2.1.x, update to a version after 3.3.2.3 or apply the necessary patches to restrict access to image files. For versions 3.3.2 before 3.3.2.3, update to version 3.3.2.3 or later to fix the issue. For versions 3.4.1 before 3.4.1.1, update to version 3.4.1.1 or later to resolve the problem.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-8895

Produtos afetados

Ibm Tririga Application Platform