CVE-2013-6303 - Directory traversal vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to read arbitrary files via unspecified vectors

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to read arbitrary files via unspecified vectors

Published Mar 5, 2014

4.0

MEDIUM

CVSS 2.0

EPSS 1.44%

Description

Directory traversal vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to read arbitrary files via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (3)

http://www-01.ibm.com/support/docview.wss?uid=swg21666110
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-6129
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88534
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg21666110		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-6129		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88534		vdb-entryx_refsource_XF