CVE Feed

    Dashboard / CVE / CVE-2011-0494

    CVE-2011-0494

    Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors. NOTE: this might overlap CVE-2010-4622.

    Published:Jan 19, 2011
    Last Modified:Apr 11, 2025
    EPS:Jan 19, 2011
    EPSS Score:0.0023
    CVSS Score:5

    Affected Products

    Vendor
    Ibm
    Product
    Tivoli Access Manager For E-business

    Exploits

    No exploit reference

    Related CVEs

    CVE-2017-1489 (CVSS 6.1) — IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vu…
    CVE-2010-4622 (CVSS 5) — Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TI…
    CVE-2010-4623 (CVSS 4) — WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authentica…
    CVE-2010-4120 (CVSS 4.3) — Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-busi…
    CVE-2010-0311 (CVSS 6.8) — Unspecified vulnerability in Sun Java System Identity Manager (aka IdM) 8.1.0.5 and 8.1.0.6, when Sun Java Sys…
    CVE-2008-5257 (CVSS 4.3) — webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a de…
    CVE-2006-0513 (CVSS 5) — Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager…
    CVE-2004-2558 (CVSS 7.5) — Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.…

    References

    http://secunia.com/advisories/42955
    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87328
    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87470
    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91619
    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91620
    http://www-01.ibm.com/support/docview.wss?uid=swg21459999
    http://www-01.ibm.com/support/docview.wss?uid=swg24025790
    http://www-01.ibm.com/support/docview.wss?uid=swg24028829
    http://www-01.ibm.com/support/docview.wss?uid=swg24028860
    http://www-01.ibm.com/support/docview.wss?uid=swg24028861
    http://www.securityfocus.com/bid/45836
    http://www.vupen.com/english/advisories/2011/0138
    https://exchange.xforce.ibmcloud.com/vulnerabilities/64737
    http://secunia.com/advisories/42955
    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87328
    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87470
    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91619
    http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91620
    http://www-01.ibm.com/support/docview.wss?uid=swg21459999
    http://www-01.ibm.com/support/docview.wss?uid=swg24025790
    http://www-01.ibm.com/support/docview.wss?uid=swg24028829
    http://www-01.ibm.com/support/docview.wss?uid=swg24028860
    http://www-01.ibm.com/support/docview.wss?uid=swg24028861
    http://www.securityfocus.com/bid/45836
    http://www.vupen.com/english/advisories/2011/0138
    https://exchange.xforce.ibmcloud.com/vulnerabilities/64737

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High