CVE-2014-0918
Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL.
- Score
- CVSS 2.0 7.1 High
- Status
- Modified - psirt@us.ibm.com
- Published
- 2014-05-16
- Last modified
- 2024-08-06
- Weaknesses
- CWE-22
Affected products
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI14125
- http://www-01.ibm.com/support/docview.wss?uid=swg21670753
- http://www.securityfocus.com/bid/67340
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91980
