CVE-2014-6194 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2014-6194

Modified

More Info Official Page

Source-psirt@us.ibm.com

Published At-17 Feb, 2015 | 01:59

Updated At-06 May, 2026 | 22:30

Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to read arbitrary files via a .. (dot dot) in a pathname.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 4.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:N/A:N

CPE Matches

IBM Corporation

>>change_and_configuration_management_database>>7.1

cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*

IBM Corporation

>>change_and_configuration_management_database>>7.2

cpe:2.3:a:ibm:change_and_configuration_management_database:7.2:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1

cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1

cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.1

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.2

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.5

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.6

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.7

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.8

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.9

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.10

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.11

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.12

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.12:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.13

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.13:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.2

cpe:2.3:a:ibm:maximo_asset_management:7.1.2:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.0

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.1

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.2

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.3

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.4

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.5

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.6

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.10

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.10:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>7.1

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>7.5.0.0

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_government>>7.1

cpe:2.3:a:ibm:maximo_for_government:7.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_government>>7.5.0.0

cpe:2.3:a:ibm:maximo_for_government:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_life_sciences>>7.1

cpe:2.3:a:ibm:maximo_for_life_sciences:7.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_life_sciences>>7.5.0.0

cpe:2.3:a:ibm:maximo_for_life_sciences:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_nuclear_power>>7.1

cpe:2.3:a:ibm:maximo_for_nuclear_power:7.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_nuclear_power>>7.5.0.0

cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_oil_and_gas>>7.1

cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_oil_and_gas>>7.5.0.0

cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_transportation>>7.1

cpe:2.3:a:ibm:maximo_for_transportation:7.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_transportation>>7.5.0.0

cpe:2.3:a:ibm:maximo_for_transportation:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_utilities>>7.1

cpe:2.3:a:ibm:maximo_for_utilities:7.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_for_utilities>>7.5.0.0

cpe:2.3:a:ibm:maximo_for_utilities:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.0.1

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.1:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.0.2

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.2:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.0.3

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.3:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.0.5

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.5:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.1.0

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.0:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.1.1

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.1:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_asset_management_for_it>>7.1

cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_asset_management_for_it>>7.2

cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_service_request_manager>>7.1

cpe:2.3:a:ibm:tivoli_service_request_manager:7.1:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_service_request_manager>>7.2

cpe:2.3:a:ibm:tivoli_service_request_manager:7.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-22	Primary	nvd@nist.gov

CWE ID: CWE-22

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg21694035	psirt@us.ibm.com	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98605	psirt@us.ibm.com	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg21694035	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98605	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21694035

Source: psirt@us.ibm.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/98605

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21694035

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/98605

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A