CVE-2013-6720

Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2…

published March 6, 2014

CVSS

—

EPSS

29%

Percentile

98.2

In the wild

Unconfirmed

What it is

Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2 allows remote authenticated users to bypass intended access restrictions via a .. (dot dot) in the log parameter, as demonstrated using a crafted request for a customer-support file, as demonstrated by a log file.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.29072 · 98.2th percentile
Published: 2014-03-06T11:00Z

EPSS history

Timeline

06 MAR 11:00Z
Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2…
cvelistv5