CVEvulnerability

CVE-2014-6155

4.0 MEDIUM Published 2014-12-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-12-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-22

Description

Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allow remote authenticated users to read arbitrary files via unspecified vectors.

Affected configurations

• ibm websphere service registry and repository 7.5.0.0 • ibm websphere service registry and repository 7.5.0.1 • ibm websphere service registry and repository 7.5.0.2 • ibm websphere service registry and repository 7.5.0.3 • ibm websphere service registry and repository 7.5.0.4 • ibm websphere service registry and repository 8.0 • ibm websphere service registry and repository 8.0.0.1 • ibm websphere service registry and repository 8.0.0.2 • ibm websphere service registry and repository 8.5

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References