NetSight
IP …
medium6.5

CVE-2016-5946

Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users t…

Impact

Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.

Affected products

VendorProductAffected versions
IbmSpectrum Control
Versions 5.2.8, 5.2.9, 5.2.10, 5.2.10.1
IbmTivoli Storage Productivity Center
Versions 5.2.0, 5.2.1, 5.2.1.1, 5.2.2, 5.2.3, 5.2.4

Weakness classification

CWE-200

References