VULNERABILITY INTELLIGENCE

CVE-2014-6154

CVSS score7.8 HIGH
EPSS probability3.52%
CISA KEVNot currently listed
Published2015-02-13
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for DB2 5.1 through 5.3.1 on Linux, UNIX, and Windows allows remote attackers to access arbitrary files via a .. (dot dot) in a URL.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references