IBM Tivoli Access Manager for e-business Unspecified Directory Traversal Vulnerability

IBM Tivoli Access Manager for e-business Unspecified Directory Traversal Vulnerability

The IBM Tivoli Access Manager for e-business is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks.

IBM Tivoli Access Manager for e-business versions 6.1, 6.0, and 5.1 running on AIX, Linux, Solaris, Z/OS, and Windows are vulnerable.

Please note that this issue may be related to the vulnerability described in BID 45582 (IBM Tivoli Access Manager for e-business Directory Traversal Vulnerability). We will update this BID when more information becomes available.