CVEvulnerability
CVE-2014-8895
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-01-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.
Affected configurations
• ibm tririga application platform 3.2.1
• ibm tririga application platform 3.3.2.0
• ibm tririga application platform 3.3.2.1
• ibm tririga application platform 3.3.2.2
• ibm tririga application platform 3.4.0.0
• ibm tririga application platform 3.4.0.1
• ibm tririga application platform 3.4.1.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/62674 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21694771 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/72430 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99014 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/62674 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21694771 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/72430 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99014 exchange.xforce.ibmcloud.com