First published: Wed Mar 05 2014(Updated: )
Directory traversal vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to read arbitrary files via unspecified vectors.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Algo One | =4.7.0 | |
IBM Algo One | =4.7.1 | |
IBM Algo One | =4.8.0 | |
IBM Algo One | =4.9.0 | |
IBM Algo One | =4.9.1 | |
IBM Algo One | =5.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-6303 is classified as a medium severity vulnerability.
To fix CVE-2013-6303, it is recommended to upgrade IBM Algo One to a version that is not affected, such as any version after 5.0.0.
CVE-2013-6303 affects users of IBM Algo One versions 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and AlgoWebApps 5.0.0.
CVE-2013-6303 is a directory traversal vulnerability which allows remote authenticated users to read arbitrary files.
Yes, CVE-2013-6303 can be exploited remotely by authenticated users.