Exploit IBM Tivoli Access Manager 6.1.1 for E-Business - Directory Traversal

[Exploiter]

EDB-ID

35148

Проверка EDB

1. Пройдено

Автор

ANONYMOUS

Тип уязвимости

REMOTE

Платформа

LINUX

CVE

N/A

Дата публикации

2010-12-24

source: https://www.securityfocus.com/bid/45582/info

IBM Tivoli Access Manager for e-business is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks.

IBM Tivoli Access Manager for e-business 6.1.1 is vulnerable. 

http://www.example.com/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/etc/passwd