medium4.0
CVE-2013-6304
Multiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass in…
Impact
Multiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass intended access restrictions via a crafted pathname for a (1) configuration or (2) JAR file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Algo One | Version 4.9.1 |
| Ibm | Algo Risk Application | Versions 2.4.0.1, 2.4.1, 2.4.2, 2.5.0, 2.5.1, 2.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www-01.ibm.com/support/docview.wss?uid=swg21666093
- http://www.securityfocus.com/bid/65929
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88535
- http://www-01.ibm.com/support/docview.wss?uid=swg21666093
- http://www.securityfocus.com/bid/65929
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88535