CVE-2014-8895: IBM Tririga Application Platform

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote attackers to bypass intended access restrictions and read the image files of arbitrary users via a crafted URL.

Affected products

• IBM Tririga Application Platform: version 3.2.1 only; version 3.3.2.0 only; version 3.3.2.1 only; version 3.3.2.2 only; version 3.4.0.0 only; version 3.4.0.1 only; …

Published 2015-01-29. Last modified 2026-06-17.