Path Traversal in IBM Optim Performance Manager

CVE-2014-6154

Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for DB2 5.1 through 5.3.1 on Linux, UNIX, and Windows allows remote attackers to access arbitrary files via a .. (dot dot) in a URL.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.035 (88.4th percentile) — read the EPSS interpretation.

Affected products

Ibm Optim_performance_manager — versions 4.1.1, 4.1.1.1, 5.1.0
Linux Linux_kernel
Microsoft Windows
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

psirt@us.ibm.com (vdb-entry, x_refsource_XF)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)