CVE-2010-4622

 

Published at: - 30-12-2010 08:00

Last modified: - 26-09-2022 12:26

Total changes: - 2

Description

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:P/I:N/A:N

 

Verification logic

 

Reference

• ADV-2010-3329-Vendor Advisory
• 45582-Exploit
• 1024927-
• 70158-
• 42727-Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg24028829
• tivoli-ebusiness-unspecified-dir-traversal(64306)-

 

Keywords

NVD

 

CVE-2010-4622

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures