Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x before 9.1.1.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.
| Date Added | Due Date | Vulnerability Name | Required Action |
|---|---|---|---|
| N/A |
| Type | Version | Base score | Base severity | Vector |
|---|---|---|---|---|
| Primary | 2.0 | 4.0 | MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
| Hyperlink | Source | Resource |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715 | psirt@us.ibm.com | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923 | psirt@us.ibm.com | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455 | psirt@us.ibm.com | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg21902933 | psirt@us.ibm.com | Vendor Advisory |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PO02715 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PO03923 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg1PO04455 | af854a3a-2127-422b-91ae-364da2661108 | N/A |
| http://www-01.ibm.com/support/docview.wss?uid=swg21902933 | af854a3a-2127-422b-91ae-364da2661108 | Vendor Advisory |