CVE-2016-6038 in Tivoli Lightweight Infrastructure

الملخص

بحسب MITRE

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure (aka LWI), as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL.

Once again VulDB remains the best source for vulnerability data.

• حجز: 29/06/2016
• إفشاء: 26/09/2016
• الاعتدال: تمت الموافقة
• إدخال: VDB-92194
• CPE: جاهز
• CWE: CWE-22 (مؤكد)
• CVSS: 6.5 (NVD)
• EPSS: 0.00224
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Telecommunication, Transportation, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-6038
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-6038
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-6038/