CVE-2010-4444

Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Integer overflow

Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-4444

CVE-2010-4444 affects Oracle Sun Java System Access Manager and Oracle OpenSSO versions 7, 7.1, and 8. The connected documents describe an unspecified vulnerability that could impact confidentiality, integrity, and availability via unknown vectors, with a CVSSv2 base score of 6.8 (network access,...

CVE-2011-0494

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might...

Directory traversal

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might...

CVE-2011-0494

CVE-2011-0494 is a directory traversal vulnerability affecting IBM Tivoli Access Manager for e-Business WebSEAL. The issue exists in WebSEAL components across several releases: 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 b...

PT-2011-2393

Name of the Vulnerable Software and Affected Versions IBM Tivoli Access Manager for e-business versions 5.1 before 5.1.0.39-TIV-AWS-IF0040 IBM Tivoli Access Manager for e-business versions 6.0 before 6.0.0.25-TIV-AWS-IF0026 IBM Tivoli Access Manager for e-business versions 6.1.0 before...

CVE-2011-0494: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might...

CVE-2010-4444: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Java System Access Manager and Oracle OpenSSO 7, 7.1, and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

PT-2011-1548

Name of the Vulnerable Software and Affected Versions Oracle Sun Java System Access Manager and Oracle OpenSSO versions 7, 7.1, and 8 Description The issue affects confidentiality, integrity, and availability. It can be exploited by remote attackers via unknown vectors. Recommendations For Oracle...

CVE-2010-4623

WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service worker thread consumption via shift-reload actions...

CVE-2010-4622

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e encoded dot dot in a URI...

Code injection

WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service worker thread consumption via shift-reload actions...

Directory traversal

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e encoded dot dot in a URI...

CVE-2010-4623

WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service worker thread consumption via shift-reload actions...

CVE-2010-4623

CVE-2010-4623 affects IBM Tivoli Access Manager for e-Business WebSEAL: WebSEAL 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to trigger a denial of service by performing shift-reload actions, reducing availability. The issue is mitigated by applying the FP0001 patch (6.1.1-...

CVE-2010-4622

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e encoded dot dot in a URI...

CVE-2010-4622

CVE-2010-4622 is a directory traversal vulnerability in IBM Tivoli Access Manager for e-Business WebSEAL 6.1.1 on AIX, exploitable via an encoded dot-dot in the URI (%uff0e%uff0e) to read arbitrary files. The entry notes a vulnerable version before 6.1.1-TIV-AWS-FP0001 and lists multiple public a...

CVE-2010-4623: Undefined Security Weakness

WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service worker thread consumption via shift-reload actions...

PT-2010-5586

Name of the Vulnerable Software and Affected Versions IBM Tivoli Access Manager for e-business version 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX Description The issue allows remote attackers to read arbitrary files via a %uff0e%uff0e encoded dot dot in a URI, which is a directory traversal...