Description
Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded (1) /.. or (2) \.. sequences.
References
- VU#348040 third-party-advisory
- securid-webid-unicode-traversal(7397) vdb-entry
- 3461 vdb-entry