VulnerabilityModified
CVE-2016-5946
Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a ..
MEDIUM 6.5EPSS 1.63%
Does this matter?
Lower severity and a low EPSS score (1.63%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.
- CVSS 3.0
- 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.63% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- ibm/spectrum control · ibm/tivoli storage productivity center
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21988625Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93086
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21988625Patch, Vendor Advisory
- http://www.securityfocus.com/bid/93086
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.