CVE-2010-4622: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e encoded dot dot in a URI...