CVE-2013-6728

IBM WebSphere Dashboard Framework 6.1.5/7.0.1 - Arbitrary File Read/Delete via Charting

Title source: llm
STIX 2.1

Description

The charting component in IBM WebSphere Dashboard Framework (WDF) 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21663022
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1LO78265
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1LO78266
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/89283

Scores

EPSS 0.0118
EPSS Percentile 64.5%

Details

CWE
CWE-264
Status published
Products (2)
ibm/websphere_dashboard_framework 6.1.5
ibm/websphere_dashboard_framework 7.0.1
Published Feb 14, 2014
Tracked Since Feb 18, 2026