Description
Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21988625
- IT16944 vendor-advisory
- 93086 vdb-entry