Description
Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI.
References
- ADV-2010-3329 vdb-entry
- 45582 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg24028829
- 1024927 vdb-entry
- 70158 vdb-entry
- 42727 third-party-advisory
- tivoli-ebusiness-unspecified-dir-traversal(64306) vdb-entry