CVE-2011-0494

Published Jan 19, 2011

Last updated 7 years ago

Overview

Description: Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might overlap CVE-2010-4622.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-22

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7319E4CB-5F62-4584-AD9A-3031F6B602B1"
          },
          {
            "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:5.1.0.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "20FA6E05-2048-457E-BCD8-C08477AA2D98"
          },
          {
            "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C419CCFC-9DDE-4018-BECA-5AB6B3ADDCE0"
          },
          {
            "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.0.0.17:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "94B170D8-F1F6-4983-9741-E822ADEF99E8"
          },
          {
            "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.0.0.23:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1D9D32F9-218E-4CAA-82C2-A3D05C5CDC46"
          },
          {
            "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7CAE25B3-55F6-4D93-9110-26323F5D6CF8"
          },
          {
            "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D3B0FD7F-8007-41F8-A0B3-0C11B9F6D2BA"
          },
          {
            "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C7255EFB-AE47-45E9-853E-5242D350A04E"
          },
          {
            "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8FDBFAE1-351E-4E9F-877E-E9BBB50FCFF8"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References