Design/Logic Flaw

2015-01-2901:59:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.0%

JSON

IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.

CPENameOperatorVersion
tririga_application_platformeq3.2.1
tririga_application_platformeq3.3.2.0
tririga_application_platformeq3.4.0.0
tririga_application_platformeq3.3.2.2
tririga_application_platformeq3.3.2.1
tririga_application_platformeq3.4.1.0
tririga_application_platformeq3.4.0.1

Name	Operator	Version
tririga_application_platform	eq	3.2.1
tririga_application_platform	eq	3.3.2.0
tririga_application_platform	eq	3.4.0.0
tririga_application_platform	eq	3.3.2.2
tririga_application_platform	eq	3.3.2.1
tririga_application_platform	eq	3.4.1.0
tririga_application_platform	eq	3.4.0.1