Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5984 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.474Z Vendors: IBM Corporation Products: InfoSphere Information Server Problem Types: Cross-Site Scripting Description: IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could exploit this vulnerability using a specially-crafted URL to navigate to a web page the attacker controls. An attacker could use this vulnerability to conduct clickjacking or other client-side browser attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21991682 - h
itional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21991682 - http://www.securityfocus.com/bid/95106
CVE ID: CVE-2016-5985 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.459Z Vendors: IBM Corporation Products: Tivoli Storage Manager Problem Types: Gain Privileges Description: The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21993695 - http://www.securityfocus.com/bid/94808
CVE ID: CVE-2016-5986 State: PUBLISHED Published: 2016-10-01T01:00:00 Last Updated: 2024-08-06T01:15:10.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21990056 - http://www.securityfocus.com/bid/93013 - http://www.securitytracker.com/id/1036838 - http://www-01.ibm.com/support/docview.wss?uid=swg1PI67093
CVE ID: CVE-2016-5987 State: PUBLISHED Published: 2016-11-30T11:00:00 Last Updated: 2024-08-06T01:15:10.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93511 - http://www-01.ibm.com/support/docview.wss?uid=swg21990449
CVE ID: CVE-2016-5988 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.862Z Vendors: IBM Corporation Products: Privileged Identity Manager Problem Types: Obtain Information Description: IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21996614 - http://www.securityfocus.com/bid/95198
CVE ID: CVE-2016-5990 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.834Z Vendors: IBM Corporation Products: Privileged Identity Manager Problem Types: Gain Access Description: IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically executed by the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21996614 - http://www.securityfocus.com/bid/95199
CVE ID: CVE-2016-5991 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-06T01:15:10.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94515 - http://www-01.ibm.com/support/docview.wss?uid=swg21989807 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT16911
CVE ID: CVE-2016-5992 State: PUBLISHED Published: 2016-11-25T03:38:00 Last Updated: 2024-08-06T01:15:10.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21989807 - http://www.securityfocus.com/bid/94514 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT16911
CVE ID: CVE-2016-5994 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.591Z Vendors: IBM Corporation Products: InfoSphere Information Server Problem Types: Obtain Information Description: IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine its contents. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93557 - http://www.securitytracker.com/id/1037022 - http://www.ibm.com/support/docview.wss?uid=swg21992171
CVE ID: CVE-2016-5995 State: PUBLISHED Published: 2016-10-01T01:00:00 Last Updated: 2024-08-06T01:15:10.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IT17012 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT16921 - http://www.securitytracker.com/id/1036837 - http://www.securityfocus.com/bid/93012 - http://www-0
.wss?uid=swg1IT16921 - http://www.securitytracker.com/id/1036837 - http://www.securityfocus.com/bid/93012 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT17010 - http://www-01.ibm.com/support/docview.wss?uid=swg21990061 - http://www-01.ibm.com/support/docview.wss?uid=swg1IT17011
CVE ID: CVE-2016-5996 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not enforce password-length restrictions, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93138 - http://www-01.ibm.com/support/docview.wss?uid=s
rogram Container: References: - http://www.securityfocus.com/bid/93138 - http://www-01.ibm.com/support/docview.wss?uid=swg21990216
CVE ID: CVE-2016-5997 State: PUBLISHED Published: 2016-09-26T01:00:00 Last Updated: 2024-08-06T01:15:10.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not apply password-quality rules to password changes, which makes it easier for remote attackers to obtain access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93144 - http://www-01.ibm.com/support/docvi
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93144 - http://www-01.ibm.com/support/docview.wss?uid=swg21990216
CVE ID: CVE-2016-6000 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.786Z Vendors: IBM Corporation Products: TRIRIGA Application Platform Problem Types: Cross-Site Scripting Description: IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93603 - http://www.ibm.com/support/docview.wss?uid=swg21991995
CVE ID: CVE-2016-6001 State: PUBLISHED Published: 2017-02-01T22:00:00 Last Updated: 2024-08-06T01:15:10.793Z Vendors: IBM Corporation Products: Forms Experience Builder Problem Types: Obtain Information Description: IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for some information disclosure of internal resources. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95777 - http://www.ibm.com/support/docview.wss?uid=swg21991280
CVE ID: CVE-2016-6018 State: PUBLISHED Published: 2017-07-19T20:00:00Z Last Updated: 2024-09-16T18:45:13.504Z Vendors: IBM Products: Emptoris Contract Management Problem Types: Obtain Information Description: IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/116738 - http://www.ibm.com/support/docview.wss?uid=swg22005664 - http://www.securityfocus.com/bid/99624
CVE ID: CVE-2016-6019 State: PUBLISHED Published: 2017-07-13T15:00:00Z Last Updated: 2024-09-16T21:02:54.064Z Vendors: IBM Products: Emptoris Strategic Supply Management Problem Types: Cross-Site Scripting Description: IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 116739. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/116739 - http://www.securityfo
CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/116739 - http://www.securityfocus.com/bid/99589 - http://www.ibm.com/support/docview.wss?uid=swg22005839
CVE ID: CVE-2016-6020 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.633Z Vendors: IBM Corporation Products: Sterling B2B Integrator Problem Types: Gain Access Description: IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. Additional Analyst Notes:
attacker to obtain highly sensitive information or conduct further attacks against the victim. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95098 - http://www.ibm.com/support/docview.wss?uid=swg21995794
CVE ID: CVE-2016-6021 State: PUBLISHED Published: 2017-08-14T22:00:00Z Last Updated: 2024-09-16T20:57:21.632Z Vendors: IBM Products: Emptoris Strategic Supply Management Problem Types: Cross-Site Scripting Description: IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 116755. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/116755 - http://www.ibm.com/support/docvie
Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/116755 - http://www.ibm.com/support/docview.wss?uid=swg22006799
CVE ID: CVE-2016-6022 State: PUBLISHED Published: 2017-03-31T18:00:00 Last Updated: 2024-08-06T01:15:10.835Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000784. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22000784 - http://www.securityfocus.com/bid/971
Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22000784 - http://www.securityfocus.com/bid/97173
CVE ID: CVE-2016-6023 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:15:10.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21991278 - http://www.securityfocus.com/bid/93347
CVE ID: CVE-2016-6024 State: PUBLISHED Published: 2017-11-27T21:00:00Z Last Updated: 2024-09-17T00:20:27.318Z Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: IBM Jazz technology based products might divulge information that might be useful in helping attackers through error messages. IBM X-Force ID: 116868. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/116868 - http://www.ibm.com/support/docview.wss?uid=swg22010512
CVE ID: CVE-2016-6025 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:15:10.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows remote attackers to obtain access by leveraging an unattended workstation to conduct a post-logoff session-reuse attack involving a modified URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93345 - http://www-01.ibm.com/support/docview.wss?uid=swg21991278
CVE ID: CVE-2016-6026 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:15:10.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 allows man-in-the-middle attackers to obtain sensitive information via an HTTP method that is neither GET nor POST. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93342 - http://www-01.ibm.com/support/docview.wss?uid=swg21991278
CVE ID: CVE-2016-6027 State: PUBLISHED Published: 2016-10-06T10:00:00 Last Updated: 2024-08-06T01:15:10.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information or modify data by leveraging use of HTTP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93340 - http://www-01.ibm.com/support/docview.wss?uid=swg21991278
CVE ID: CVE-2016-6028 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.863Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95111 - https://www.ibm.com/support/docview.wss?uid=swg21996097
CVE ID: CVE-2016-6029 State: PUBLISHED Published: 2017-08-14T22:00:00Z Last Updated: 2024-09-16T22:56:01.377Z Vendors: IBM Products: Emptoris Strategic Supply Management Problem Types: Cross-Site Scripting Description: IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 116881. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006799 - https://exchange.xforc
: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006799 - https://exchange.xforce.ibmcloud.com/vulnerabilities/116881
CVE ID: CVE-2016-6030 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:15:10.728Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95110 - https://www.ibm.com/support/docview.wss?uid=swg21996097
CVE ID: CVE-2016-6031 State: PUBLISHED Published: 2017-03-31T18:00:00 Last Updated: 2024-08-06T01:15:10.890Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000784. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22000784 - http://www.securityfocus.com/bid/
ram Container: References: - https://www.ibm.com/support/docview.wss?uid=swg22000784 - http://www.securityfocus.com/bid/97169
CVE ID: CVE-2016-6032 State: PUBLISHED Published: 2017-02-08T19:00:00 Last Updated: 2024-08-06T01:22:19.018Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg21997104
CVE ID: CVE-2016-6033 State: PUBLISHED Published: 2017-02-15T19:00:00 Last Updated: 2024-08-06T01:22:19.015Z Vendors: IBM Corporation Products: Tivoli Storage Manager for Virtual Environments Problem Types: Gain Access Description: IBM Tivoli Storage Manager for Virtual Environments 7.1 (VMware) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 1995545. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95102 - http://www.ibm.com/support/docview.wss?uid=swg21995545
CVE ID: CVE-2016-6034 State: PUBLISHED Published: 2017-02-01T20:00:00 Last Updated: 2024-08-06T01:22:20.651Z Vendors: IBM Corporation Products: Tivoli Storage Manager for Virtual Environments Problem Types: Obtain Information Description: IBM Tivoli Storage Manager for Virtual Environments (VMware) could disclose the Windows domain credentials to a user with a high level of privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95976 - http://www.ibm.com/support/docview.wss?uid=swg21995544
CVE ID: CVE-2016-6035 State: PUBLISHED Published: 2017-05-10T14:00:00 Last Updated: 2024-08-06T01:22:19.019Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 116896. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22002429
CVE ID: CVE-2016-6036 State: PUBLISHED Published: 2017-03-31T18:00:00 Last Updated: 2024-08-06T01:22:20.619Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000784. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97172 - https://www.ibm.com/support/docview.wss?uid=
E Program Container: References: - http://www.securityfocus.com/bid/97172 - https://www.ibm.com/support/docview.wss?uid=swg22000784
CVE ID: CVE-2016-6037 State: PUBLISHED Published: 2017-05-10T14:00:00 Last Updated: 2024-08-06T01:22:20.663Z Vendors: IBM Corporation Products: Rational Collaborative Lifecycle Management Problem Types: Gain Access Description: IBM Rational Team Concert (RTC) is vulnerable to HTML injection. A remote attacker with project administrator privileges could send a project that contains malicious HTML code, which when the project is viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 116918. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22002429
CVE ID: CVE-2016-6038 State: PUBLISHED Published: 2016-09-26T17:00:00 Last Updated: 2024-08-06T01:22:18.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure (aka LWI), as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93180 - http://www.securitytracker.com/id/1036887 - http://aix.software.ibm.com/aix/efixes/security/pconsole_mitigation.asc