Unscored severity · published Jul 23, 2001
CVE-2001-0982
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded
–
CVSS
2.3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tivoli Secureway Policy Director · Ibm
3.0.1; 3.6; 3.7; 3.7.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0982
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0982
Patch
http://archives.neohapsis.com/archives/bugtraq/2001-07/0497.html
www-1.ibm.com
http://www-1.ibm.com/support/search.wss?rs=0&q=IY18152&apar=only
www.osvdb.org
http://www.osvdb.org/1908
Patch
http://www.securityfocus.com/bid/3080
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6884
More from Tivoli Secureway Policy Director
–
CVE-2004-2558
Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration…
–
CVE-2001-1191
WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e