4.3
CVE-2014-8895
- EPSS 1.24%
- Veröffentlicht 29.01.2015 01:59:02
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginIBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Tririga Application Platform Version3.2.1
Ibm ≫ Tririga Application Platform Version3.3.2.0
Ibm ≫ Tririga Application Platform Version3.3.2.1
Ibm ≫ Tririga Application Platform Version3.3.2.2
Ibm ≫ Tririga Application Platform Version3.4.0.0
Ibm ≫ Tririga Application Platform Version3.4.0.1
Ibm ≫ Tririga Application Platform Version3.4.1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.24% | 0.653 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
http://secunia.com/advisories/62674
http://www-01.ibm.com/support/docview.wss?uid=swg21694771
http://www.securityfocus.com/bid/72430
https://exchange.xforce.ibmcloud.com/vulnerabilities/99014