Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI.
CPE | Name | Operator | Version |
---|---|---|---|
tivoli_access_manager_for_e-business | eq | 6.1.1 |