{"id":"CVE-2014-6222","state":"PUBLISHED","title":"Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before","description":"Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.","publishedAt":"2015-06-07T18:00:00.000Z","updatedAt":"2024-08-06T12:10:12.767Z","severity":null,"assigner":"ibm","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://www-01.ibm.com/support/docview.wss?uid=swg21902933","http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455","http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715","http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923"],"weaknesses":[],"ingestedAt":"2026-10-29T19:41:33.236Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2014/6xxx/CVE-2014-6222.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2014-6222","state":"PUBLISHED","datePublished":"2015-06-07T18:00:00.000Z","dateUpdated":"2024-08-06T12:10:12.767Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2014-09-02T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21902933","tags":["x_refsource_CONFIRM"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455","name":"PO04455","tags":["vendor-advisory","x_refsource_AIXAPAR"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715","name":"PO02715","tags":["vendor-advisory","x_refsource_AIXAPAR"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923","name":"PO03923","tags":["vendor-advisory","x_refsource_AIXAPAR"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2015-06-07T18:57:00.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2015-05-28T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2014-6222","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21902933","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21902933"},{"name":"PO04455","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455"},{"name":"PO02715","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715"},{"name":"PO03923","refsource":"AIXAPAR","url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21902933","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455","name":"PO04455","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715","name":"PO02715","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923","name":"PO03923","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-06T12:10:12.767Z"}}]}}}