• Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 5.1 before 5.1.0.39-TIV-AWS-IF0040, 6.0 before 6.0.0.25-TIV-AWS-IF0026, 6.1.0 before 6.1.0.5-TIV-AWS-IF0006, and 6.1.1 before 6.1.1-TIV-AWS-FP0001 has unspecified impact and attack vectors.
  
  Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI.

• Update to the latest version of IBM Tivoli Access Manager.

• • CVE-2011-0494
  • CVE-2010-4622

• 

• CVE-2010-4622

  CVE-2011-0494

• CWE-22

• CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

• Directory Traversal Known Vulnerabilities

• Cisco Adaptive Security Appliance (ASA) Path Traversal
• WordPress Plugin Photo Gallery by WD-Responsive Photo Gallery for WordPress Directory Traversal (1.3.42)
• WordPress Plugin cloudsafe365_for_WP 'file' Parameter Remote File Disclosure (1.46)
• WordPress Plugin WP Vault Local File Inclusion (0.8.6.6)
• WordPress Plugin WP-Mon Arbitrary File Disclosure (0.5.1)