4
CVSSv2

CVE-2014-6194

Published: 17/02/2015 Updated: 08/09/2017
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 up to and including 7.1.1.13 and 7.5.0 prior to 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0 up to and including 7.5.0.3 and 7.5.1 up to and including 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 up to and including 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to read arbitrary files via a .. (dot dot) in a pathname.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm maximo asset management 7.1.1.13

ibm maximo asset management 7.5.0.5

ibm maximo asset management 7.1.1.5

ibm maximo for utilities 7.1

ibm maximo for life sciences 7.5.0.0

ibm maximo asset management 7.1.1.7

ibm maximo for nuclear power 7.1

ibm maximo for oil and gas 7.5.0.0

ibm tivoli service request manager 7.1

ibm maximo for transportation 7.5.0.0

ibm maximo asset management 7.1.1.10

ibm smartcloud control desk 7.5.1.0

ibm maximo asset management 7.1.1.8

ibm maximo asset management 7.5.0.4

ibm maximo asset management 7.1.1.12

ibm maximo asset management 7.1.1.9

ibm maximo asset management 7.1.1.2

ibm maximo asset management 7.5.0.1

ibm smartcloud control desk 7.5.0.3

ibm change and configuration management database 7.1

ibm maximo asset management 7.1.1.11

ibm tivoli asset management for it 7.2

ibm maximo asset management 7.1

ibm maximo for oil and gas 7.1

ibm maximo for government 7.5.0.0

ibm maximo for government 7.1

ibm change and configuration management database 7.2

ibm maximo asset management 7.5.0.2

ibm maximo asset management essentials 7.5.0.0

ibm smartcloud control desk 7.5.0.1

ibm tivoli asset management for it 7.1

ibm maximo asset management 7.1.1.6

ibm maximo asset management 7.1.2

ibm maximo asset management 7.5.0.0

ibm maximo asset management 7.5.0.3

ibm smartcloud control desk 7.5.1.1

ibm maximo for nuclear power 7.5.0.0

ibm maximo for life sciences 7.1

ibm tivoli service request manager 7.2

ibm maximo asset management 7.5.0.10

ibm maximo asset management 7.1.1

ibm maximo asset management 7.5.0.6

ibm maximo for transportation 7.1

ibm maximo asset management essentials 7.1

ibm smartcloud control desk 7.5.0.2

ibm maximo asset management 7.1.1.1

ibm smartcloud control desk 7.5.0.5

ibm maximo for utilities 7.5.0.0