Directory Traversal Vulnerability in IBM Tivoli Access Manager for E-business

CVE-2010-4622

Summary

A directory traversal vulnerability exists in the WebSEAL component of IBM Tivoli Access Manager for e-business 6.1.1 prior to version 6.1.1-TIV-AWS-FP0001 on AIX systems. This flaw allows remote attackers to exploit encoded URIs using the '%uff0e%uff0e' sequence (representing a dot dot) to read arbitrary files on the server. Such exploitation could lead to unauthorized access to sensitive information and critical system files, potentially compromising the integrity and confidentiality of the affected system.

References