Description
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.
References
- 20010723 iXsecurity.20010618.policy_director.a mailing-list
- IY18152 vendor-advisory
- 3080 vdb-entry
- tivoli-secureway-dot-directory-traversal(6884) vdb-entry
- 1908 vdb-entry