{"id":"CVE-2014-0918","state":"PUBLISHED","title":"Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.","description":"Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL.","publishedAt":"2014-05-16T10:00:00.000Z","updatedAt":"2024-08-06T09:34:39.760Z","severity":null,"assigner":"ibm","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www-01.ibm.com/support/docview.wss?uid=swg1PI14125","http://www.securityfocus.com/bid/67340","http://www-01.ibm.com/support/docview.wss?uid=swg21670753","https://exchange.xforce.ibmcloud.com/vulnerabilities/91980"],"weaknesses":[],"ingestedAt":"2026-10-29T19:41:00.122Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2014/0xxx/CVE-2014-0918.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2014-0918","state":"PUBLISHED","datePublished":"2014-05-16T10:00:00.000Z","dateUpdated":"2024-08-06T09:34:39.760Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2014-01-06T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI14125","name":"PI14125","tags":["vendor-advisory","x_refsource_AIXAPAR"]},{"url":"http://www.securityfocus.com/bid/67340","name":"67340","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21670753","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91980","name":"ibm-iehs-cve20140918-traversal(91980)","tags":["vdb-entry","x_refsource_XF"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2014-05-08T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2014-0918","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in IBM Eclipse Help System (IEHS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF27, and 8.0 before 8.0.0.1 CF06 allows remote attackers to read arbitrary files via a crafted URL."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"PI14125","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI14125"},{"name":"67340","refsource":"BID","url":"http://www.securityfocus.com/bid/67340"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21670753","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21670753"},{"name":"ibm-iehs-cve20140918-traversal(91980)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91980"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PI14125","name":"PI14125","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www.securityfocus.com/bid/67340","name":"67340","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21670753","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/91980","name":"ibm-iehs-cve20140918-traversal(91980)","tags":["vdb-entry","x_refsource_XF","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T09:34:39.760Z"}}]}}}