CVE-2016-6038: Path Traversal
Published Sep 26, 2016
·Updated
Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure (aka LWI), as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL.
Affected Software
3 affected components
IBM AIX=5.3
IBM AIX=6.1
IBM AIX=7.1
Event History
Sep 26, 2016
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6038?
CVE-2016-6038 is considered a medium severity vulnerability due to its potential for file disclosure in affected versions of IBM AIX.
2
How do I fix CVE-2016-6038?
To fix CVE-2016-6038, apply the latest security patches provided by IBM for the affected versions of AIX.
3
Who is affected by CVE-2016-6038?
CVE-2016-6038 affects remote authenticated users on IBM AIX 5.3, 6.1, and 7.1 systems.
4
What type of attack does CVE-2016-6038 enable?
CVE-2016-6038 enables directory traversal attacks, allowing attackers to read arbitrary files on the affected systems.
5
When was CVE-2016-6038 published?
CVE-2016-6038 was published in August 2016.