CVE-2010-4622 in Tivoli Access Manager for e-business
Résumé (Anglaise)
Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Réserver
30/12/2010
Divulgation
30/12/2010
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 55892 | IBM Tivoli Access Manager for e-business directory traversal | 22 | Non défini | Correctif officiel | CVE-2010-4622 |