CVE-2013-3004: Path Traversal
Published Jul 1, 2014
·Updated
Directory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.x and 7.2.x before 7.2.1.5 allows remote authenticated users to read arbitrary files via unspecified vectors.
Affected Software
25 affected components
IBM Tivoli Application Dependency Discovery Manager=7.1.2
IBM Tivoli Application Dependency Discovery Manager=7.1.2.2
IBM Tivoli Application Dependency Discovery Manager=7.1.2.3
IBM Tivoli Application Dependency Discovery Manager=7.1.2.4
IBM Tivoli Application Dependency Discovery Manager=7.1.2.5
IBM Tivoli Application Dependency Discovery Manager=7.1.2.6
IBM Tivoli Application Dependency Discovery Manager=7.1.2.7
IBM Tivoli Application Dependency Discovery Manager=7.1.2.8
IBM Tivoli Application Dependency Discovery Manager=7.2.0
IBM Tivoli Application Dependency Discovery Manager=7.2.0.1
IBM Tivoli Application Dependency Discovery Manager=7.2.0.2
IBM Tivoli Application Dependency Discovery Manager=7.2.0.3
IBM Tivoli Application Dependency Discovery Manager=7.2.0.4
IBM Tivoli Application Dependency Discovery Manager=7.2.0.5
IBM Tivoli Application Dependency Discovery Manager=7.2.0.6
IBM Tivoli Application Dependency Discovery Manager=7.2.0.7
IBM Tivoli Application Dependency Discovery Manager=7.2.0.8
IBM Tivoli Application Dependency Discovery Manager=7.2.0.9
IBM Tivoli Application Dependency Discovery Manager=7.2.0.10
IBM Tivoli Application Dependency Discovery Manager=7.2.1
IBM Tivoli Application Dependency Discovery Manager=7.2.1.1
IBM Tivoli Application Dependency Discovery Manager=7.2.1.2
IBM Tivoli Application Dependency Discovery Manager=7.2.1.3
IBM Tivoli Application Dependency Discovery Manager=7.2.1.4
IBM Tivoli Application Dependency Discovery Manager=7.2.1.5
Event History
Jul 1, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3004?
CVE-2013-3004 is classified as a medium severity vulnerability.
2
How do I fix CVE-2013-3004?
To fix CVE-2013-3004, upgrade IBM Tivoli Application Dependency Discovery Manager to version 7.2.1.5 or later.
3
Who is affected by CVE-2013-3004?
CVE-2013-3004 affects authenticated users of IBM Tivoli Application Dependency Discovery Manager versions 7.1.x and 7.2.x prior to 7.2.1.5.
4
What is a directory traversal vulnerability like CVE-2013-3004?
A directory traversal vulnerability allows an attacker to access restricted files or directories on a server.
5
Can I exploit CVE-2013-3004 if I am not authenticated?
CVE-2013-3004 can only be exploited by remote authenticated users.