Security Bulletin: Path Traversal affects IBM Security Guardium Database Activity Monitor (CVE-2016-0298)

Summary IBM Security Guardium Database Activity Monitor could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to view arbitrary files on the system. Vulnerability Details CVEID: CVE-2016-0298 DESCRIPTION: IBM Security Guardium...

CVE-2016-0298

Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL...

CVE-2016-0298

IBM Security Guardium Database Activity Monitor v10 prior to 10.0p100 is affected by CVE-2016-0298, a directory traversal vulnerability allowing an authenticated remote user to read arbitrary files via a crafted URL. Root cause: improper handling of URL paths leading to directory traversal. Impac...