SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

[Forgot Password]

Paid content will be excluded from the download.

Download | Alert*

CVE

CVE-2014-0823

Date: (C)2014-05-09 (M)2023-12-22

IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbitrary files via a crafted URL.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

IAVM:2014-B-0065

http://www-01.ibm.com/support/docview.wss?uid=swg21669554

http://www-01.ibm.com/support/docview.wss?uid=swg21676092

ibm-was-cve20140823-viewfiles(90498)

cpe:/a:ibm:websphere_application_server:8.0.0.7
cpe:/a:ibm:websphere_application_server:8.0.0.6
cpe:/a:ibm:websphere_application_server:8.0.0.5
cpe:/a:ibm:websphere_application_server:8.0.0.4
...

oval:org.secpod.oval:def:89919
oval:org.secpod.oval:def:89926

© SecPod Technologies