PT-2011-2393 · Ibm · Webseal+1

Published 2011-01-19 · Updated 2017-08-17 · CVE-2011-0494

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Access Manager for e-business versions 5.1 before 5.1.0.39-TIV-AWS-IF0040 IBM Tivoli Access Manager for e-business versions 6.0 before 6.0.0.25-TIV-AWS-IF0026 IBM Tivoli Access Manager for e-business versions 6.1.0 before 6.1.0.5-TIV-AWS-IF0006 IBM Tivoli Access Manager for e-business versions 6.1.1 before 6.1.1-TIV-AWS-FP0001

Description The issue is related to a directory traversal vulnerability in WebSEAL. The impact and attack vectors of this issue are not specified.

Recommendations For versions 5.1 before 5.1.0.39-TIV-AWS-IF0040, update to version 5.1.0.39-TIV-AWS-IF0040 or later. For versions 6.0 before 6.0.0.25-TIV-AWS-IF0026, update to version 6.0.0.25-TIV-AWS-IF0026 or later. For versions 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, update to version 6.1.0.5-TIV-AWS-IF0006 or later. For versions 6.1.1 before 6.1.1-TIV-AWS-FP0001, update to version 6.1.1-TIV-AWS-FP0001 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-0494

Affected Products

Ibm Tivoli Access Manager For E-Business

Webseal

References · 15

• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87470 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87328 · Vendor Advisory
• http://secunia.com/advisories/42955 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0138 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0494 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91619 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91620 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg24028860 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0494 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg24028861 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg24028829 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg24025790 · Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21459999 · Note
• http://securityfocus.com/bid/45836 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64737 · Note