Vulnerability in IBM Tririga Application Platform

CVE-2014-8895

IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.

EPSS: 0.012 (66.1th percentile) — read the EPSS interpretation.

Affected products

Ibm Tririga_application_platform — versions 3.2.1, 3.3.2.0, 3.3.2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (vdb-entry, x_refsource_BID)
psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@us.ibm.com (x_refsource_SECUNIA, third-party-advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)