CVE-2015-0171: Path Traversal
First published: Mon May 25 2015(Updated: )
Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM SiteProtector system | =3.0 | |
| IBM SiteProtector system | =3.0.0.1 | |
| IBM SiteProtector system | =3.0.0.2 | |
| IBM SiteProtector system | =3.0.0.3 | |
| IBM SiteProtector system | =3.0.0.4 | |
| IBM SiteProtector system | =3.0.0.5 | |
| IBM SiteProtector system | =3.0.0.6 | |
| IBM SiteProtector system | =3.1.0.0 | |
| IBM SiteProtector system | =3.1.0.1 | |
| IBM SiteProtector system | =3.1.0.2 | |
| IBM SiteProtector system | =3.1.0.3 | |
| IBM SiteProtector system | =3.1.1.0 | |
| IBM SiteProtector system | =3.1.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-0171?
CVE-2015-0171 has a severity rating that indicates a directory traversal vulnerability allowing unauthorized file write access.
How do I fix CVE-2015-0171?
To fix CVE-2015-0171, update IBM Security SiteProtector System to version 3.0.0.7 or later, or 3.1.0.4 or later, or 3.1.1.2 or later.
What versions of IBM Security SiteProtector System are affected by CVE-2015-0171?
CVE-2015-0171 affects versions prior to 3.0.0.7, 3.1.0.4, and 3.1.1.2 of IBM Security SiteProtector System.
Who can exploit CVE-2015-0171?
CVE-2015-0171 can be exploited by remote authenticated users to write to arbitrary files.
What impact does CVE-2015-0171 have on security?
CVE-2015-0171 allows attackers to manipulate file storage, potentially leading to data loss or unauthorized access to sensitive information.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/severity
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm siteprotector system
- version/ibm siteprotector system/3.0
- version/ibm siteprotector system/3.0.0.1
- version/ibm siteprotector system/3.0.0.2
- version/ibm siteprotector system/3.0.0.3
- version/ibm siteprotector system/3.0.0.4
- version/ibm siteprotector system/3.0.0.5
- version/ibm siteprotector system/3.0.0.6
- version/ibm siteprotector system/3.1.0.0
- version/ibm siteprotector system/3.1.0.1
- version/ibm siteprotector system/3.1.0.2
- version/ibm siteprotector system/3.1.0.3
- version/ibm siteprotector system/3.1.1.0
- version/ibm siteprotector system/3.1.1.1