CVE-2011-0494

critical

Description

Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might overlap CVE-2010-4622.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/64737

http://www.vupen.com/english/advisories/2011/0138

http://www.securityfocus.com/bid/45836

http://www-01.ibm.com/support/docview.wss?uid=swg24028861

http://www-01.ibm.com/support/docview.wss?uid=swg24028860

http://www-01.ibm.com/support/docview.wss?uid=swg24028829

http://www-01.ibm.com/support/docview.wss?uid=swg24025790

http://www-01.ibm.com/support/docview.wss?uid=swg21459999

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91620

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91619

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87470

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87328

http://secunia.com/advisories/42955

Details

Source: Mitre, NVD

Published: 2011-01-19

Updated: 2017-08-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical