[Forgot Password]
Login  Register Subscribe

23631

 
 

115084

 
 

97559

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2011-0494

Date: (C)2011-01-19   (M)2017-08-18
 
CVSS Score: 5.0Access Vector: NETWORK
Exploitability Subscore: 10.0Access Complexity: LOW
Impact Subscore: 2.9Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: NONE
 Availability: NONE











Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might overlap CVE-2010-4622.

Reference:
SECUNIA-42955
BID-45836
ADV-2011-0138
IAVM:2011-B-0021
IZ87328
IZ87470
IZ91619
IZ91620
http://www-01.ibm.com/support/docview.wss?uid=swg21459999
http://www-01.ibm.com/support/docview.wss?uid=swg24025790
http://www-01.ibm.com/support/docview.wss?uid=swg24028829
http://www-01.ibm.com/support/docview.wss?uid=swg24028860
http://www-01.ibm.com/support/docview.wss?uid=swg24028861
tivoli-ebusiness-webseal-directory-traversal(64737)

CPE    6
cpe:/a:ibm:tivoli_access_manager_for_e-business:5.1
cpe:/a:ibm:tivoli_access_manager_for_e-business:5.1.0.10
cpe:/a:ibm:tivoli_access_manager_for_e-business:6.0.0
cpe:/a:ibm:tivoli_access_manager_for_e-business:6.0.0.17
...
CWE    1
CWE-22

© 2013 SecPod Technologies