Lucene search

K
cve[email protected]CVE-2011-0494
HistoryJan 19, 2011 - 12:00 p.m.

CVE-2011-0494

2011-01-1912:00:22
CWE-22
web.nvd.nist.gov
25
cve
ibm
tivoli access manager
directory traversal
vulnerability
webseal
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

77.7%

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might overlap CVE-2010-4622.

Affected configurations

NVD
Node
ibmtivoli_access_manager_for_e-businessMatch5.1
OR
ibmtivoli_access_manager_for_e-businessMatch5.1.0.10
OR
ibmtivoli_access_manager_for_e-businessMatch6.0.0
OR
ibmtivoli_access_manager_for_e-businessMatch6.0.0.17
OR
ibmtivoli_access_manager_for_e-businessMatch6.0.0.23
OR
ibmtivoli_access_manager_for_e-businessMatch6.1.0
OR
ibmtivoli_access_manager_for_e-businessMatch6.1.0.3
OR
ibmtivoli_access_manager_for_e-businessMatch6.1.0.4
OR
ibmtivoli_access_manager_for_e-businessMatch6.1.1
VendorProductVersionCPE
ibmtivoli_access_manager_for_e-business6.1.0.4cpe:/a:ibm:tivoli_access_manager_for_e-business:6.1.0.4:::
ibmtivoli_access_manager_for_e-business6.0.0cpe:/a:ibm:tivoli_access_manager_for_e-business:6.0.0:::
ibmtivoli_access_manager_for_e-business6.0.0.23cpe:/a:ibm:tivoli_access_manager_for_e-business:6.0.0.23:::
ibmtivoli_access_manager_for_e-business6.1.0.3cpe:/a:ibm:tivoli_access_manager_for_e-business:6.1.0.3:::
ibmtivoli_access_manager_for_e-business6.1.1cpe:/a:ibm:tivoli_access_manager_for_e-business:6.1.1:::
ibmtivoli_access_manager_for_e-business6.1.0cpe:/a:ibm:tivoli_access_manager_for_e-business:6.1.0:::
ibmtivoli_access_manager_for_e-business5.1cpe:/a:ibm:tivoli_access_manager_for_e-business:5.1:::
ibmtivoli_access_manager_for_e-business6.0.0.17cpe:/a:ibm:tivoli_access_manager_for_e-business:6.0.0.17:::
ibmtivoli_access_manager_for_e-business5.1.0.10cpe:/a:ibm:tivoli_access_manager_for_e-business:5.1.0.10:::

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.005

Percentile

77.7%

Related for CVE-2011-0494