CVEvulnerability
CVE-2014-8115
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The default authorization constrains in KIE Workbench 6.0.x allows remote authenticated users to read or write to arbitrary files, bypass intended access restrictions, and possibly have other unspecified impact via unknown vectors.
Affected configurations
• redhat kie workbench 6.0.0
• redhat kie workbench 6.0.1
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2015-0234.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0235.html Vendor Advisory
- https://github.com/droolsjbpm/kie-wb-distributions/commit/90eed433d3 github.com
- http://rhn.redhat.com/errata/RHSA-2015-0234.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2015-0235.html Vendor Advisory
- https://github.com/droolsjbpm/kie-wb-distributions/commit/90eed433d3 github.com