CVE-2014-8895 — IBM Tririga Application Platform vulnerability

CWE-2643 documents3 sources

Severity

4.3MEDIUMNVD

EPSS

0.2%

top 56.41%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Tririga Application Platform

Timeline

PublishedJan 29

Latest updateMay 17

Description

IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/tririga_application_platform7 versions+6

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-2rr9-vr7w-3p56: IBM TRIRIGA Application Platform 3↗2022-05-17

▶

CVEList

CVE-2014-8895: IBM TRIRIGA Application Platform 3↗2015-01-29

▶