CVE-2014-6222 | BDVDB-2026-69735 Detail

Description#

Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21902933
http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455
http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715
http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923

Exploit#

No public exploit known

History#

Version 12015-06-07Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.