IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to download arbitrary files on the system. IBM X-Force ID: 78284.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ibm infosphere guardium 8.0 |
||
ibm infosphere guardium 8.01 |
||
ibm infosphere guardium 8.2 |