medium4.3
CVE-2014-8895
IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and rea…
Impact
IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Tririga Application Platform | Versions 3.2.1, 3.3.2.0, 3.3.2.1, 3.3.2.2, 3.4.0.0, 3.4.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/62674
- http://www-01.ibm.com/support/docview.wss?uid=swg21694771
- http://www.securityfocus.com/bid/72430
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99014
- http://secunia.com/advisories/62674
- http://www-01.ibm.com/support/docview.wss?uid=swg21694771
- http://www.securityfocus.com/bid/72430
- https://exchange.xforce.ibmcloud.com/vulnerabilities/99014