PT-2014-7068 · Ibm+1 · Taddm+1

Published 2014-10-29 · Updated 2017-09-08 · CVE-2014-6149

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Application Dependency Discovery Manager (TADDM) versions 7.2.0.0 through 7.2.0.10 IBM Tivoli Application Dependency Discovery Manager (TADDM) versions 7.2.1.0 through 7.2.1.6 IBM Tivoli Application Dependency Discovery Manager (TADDM) versions 7.2.2.0 through 7.2.2.2

Description A directory traversal issue in the BIRT-viewer component allows remote authenticated users to read arbitrary files.

Recommendations For versions 7.2.0.0 through 7.2.0.10, update to a version outside of this range to resolve the issue. For versions 7.2.1.0 through 7.2.1.6, update to a version outside of this range to resolve the issue. For versions 7.2.2.0 through 7.2.2.2, update to a version outside of this range to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-6149

Affected Products

Birt-Viewer

Taddm

References · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21688296 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-6149 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96919 · Note
• http://securityfocus.com/bid/70805 · Note