{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-06-19T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to bypass intended file-upload restrictions via a modified extension."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2015-06-28T22:57:01.000Z", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21902807"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2015-0126", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to bypass intended file-upload restrictions via a modified extension."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www-01.ibm.com/support/docview.wss?uid=swg21902807", "refsource": "CONFIRM", "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21902807"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T03:55:28.168Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21902807"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2015-0126", "datePublished": "2015-06-28T22:00:00.000Z", "dateReserved": "2014-11-18T00:00:00.000Z", "dateUpdated": "2024-08-06T03:55:28.168Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:leads:7.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "BCBAD574-7359-4277-8ECA-0D074634AE3E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:leads:7.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "A6ABA9D9-CECA-4F65-8850-8E934118997C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:leads:7.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "5C0983C0-8A4E-4EA5-8B4C-AEB7629CDC07", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:leads:8.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "7DCE555E-DF69-4C23-971B-C11E14BB6EB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:leads:8.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "A706D50A-92BC-4D8D-8403-21686327ADF9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:leads:8.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "F99462BD-3942-4C49-B6A4-FD95CEE64629", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:leads:8.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "E128B3BE-BB38-4790-952B-A12F25A4D591", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:leads:9.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "FDF0432E-9A53-462E-9CEA-957C629BA125", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:leads:9.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "04EE5483-58FA-4B68-B5CB-74CEF748CCC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:leads:9.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "8F830E08-F5DE-4A69-89F4-1BA4DF225A9E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote authenticated users to bypass intended file-upload restrictions via a modified extension."}, {"lang": "es", "value": "IBM Leads 7.x, 8.1.0 anterior a 8.1.0.14, 8.2, 8.5.0 anterior a 8.5.0.7.3, 8.6.0 anterior a 8.6.0.8.1, 9.0.0 hasta 9.0.0.4, 9.1.0 anterior a 9.1.0.6.1, y 9.1.1 anterior a 9.1.1.0.2 permite a usuarios remotos autenticados evadir las restricciones de la subida de ficheros a trav\u00e9s de una extensi\u00f3n modificada."}], "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/434.html\">CWE-434: Unrestricted Upload of File with Dangerous Type</a>\n", "id": "CVE-2015-0126", "lastModified": "2026-05-06T22:30:45.220", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2015-06-28T22:59:04.330", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21902807"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21902807"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "[email protected]", "type": "Primary"}]}

{}