CVE-2015-0107: Path Traversal
IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002 allow remote authenticated users to conduct directory traversal attacks via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0107?
CVE-2015-0107 is rated as high severity due to the potential for remote code execution.
How do I fix CVE-2015-0107?
To fix CVE-2015-0107, users should update affected IBM software to the latest version or apply the provided patches.
Which versions are affected by CVE-2015-0107?
CVE-2015-0107 affects IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and various Maximo Asset Management versions prior to their respective fixes.
Can CVE-2015-0107 be exploited remotely?
Yes, CVE-2015-0107 can be exploited remotely, allowing attackers to execute arbitrary code on the vulnerable systems.
What should I do if I cannot update my software to address CVE-2015-0107?
If you cannot update your software, consider implementing additional security measures such as firewalls or access controls to mitigate the risk.