CVE-2014-6149: Path Traversal

Published Oct 29, 2014

Updated

Directory traversal vulnerability in BIRT-viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 allows remote authenticated users to read arbitrary files via unspecified vectors.

Affected Software

21 affected components

IBM Tivoli Application Dependency Discovery Manager=7.2.0

IBM Tivoli Application Dependency Discovery Manager=7.2.0.1

IBM Tivoli Application Dependency Discovery Manager=7.2.0.2

IBM Tivoli Application Dependency Discovery Manager=7.2.0.3

IBM Tivoli Application Dependency Discovery Manager=7.2.0.4

IBM Tivoli Application Dependency Discovery Manager=7.2.0.5

IBM Tivoli Application Dependency Discovery Manager=7.2.0.6

IBM Tivoli Application Dependency Discovery Manager=7.2.0.7

IBM Tivoli Application Dependency Discovery Manager=7.2.0.8

IBM Tivoli Application Dependency Discovery Manager=7.2.0.9

IBM Tivoli Application Dependency Discovery Manager=7.2.0.10

IBM Tivoli Application Dependency Discovery Manager=7.2.1

IBM Tivoli Application Dependency Discovery Manager=7.2.1.1

IBM Tivoli Application Dependency Discovery Manager=7.2.1.2

IBM Tivoli Application Dependency Discovery Manager=7.2.1.3

IBM Tivoli Application Dependency Discovery Manager=7.2.1.4

IBM Tivoli Application Dependency Discovery Manager=7.2.1.5

IBM Tivoli Application Dependency Discovery Manager=7.2.1.6

IBM Tivoli Application Dependency Discovery Manager=7.2.2

IBM Tivoli Application Dependency Discovery Manager=7.2.2.1

IBM Tivoli Application Dependency Discovery Manager=7.2.2.2

Event History

Oct 29, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6149?

CVE-2014-6149 has been classified with a medium severity level due to its potential impact on data confidentiality.

How do I fix CVE-2014-6149?

To fix CVE-2014-6149, upgrade IBM Tivoli Application Dependency Discovery Manager to a version that is not affected, such as post 7.2.2.2.

Who is affected by CVE-2014-6149?

CVE-2014-6149 affects remote authenticated users of IBM Tivoli Application Dependency Discovery Manager versions 7.2.0.0 through 7.2.2.2.

What types of attacks can CVE-2014-6149 facilitate?

CVE-2014-6149 can facilitate directory traversal attacks, allowing unauthorized access to arbitrary files.

When was CVE-2014-6149 disclosed?

CVE-2014-6149 was disclosed in October 2014.