VULNERABILITY INTELLIGENCE
CVE-2014-8115
CVSS score6.5 MEDIUM
EPSS probability1.91%
CISA KEVNot currently listed
Published2015-02-20
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Description
The default authorization constrains in KIE Workbench 6.0.x allows remote authenticated users to read or write to arbitrary files, bypass intended access restrictions, and possibly have other unspecified impact via unknown vectors.
Primary references
- secalert@redhat.com — Vendor Advisory
- secalert@redhat.com — Vendor Advisory
- secalert@redhat.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108