Vulnerability Bulletins |
IBM Security Bulletin: Vulnerability in OpenSource Apache Tomcat affects IBM Algorithmics Algo Risk Application (CVE-2015-5174) |
|
| Affected software | IBM |
|
Apache Tomcat could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing “dot dot” sequences (/../) in the getResource(), getResourceAsStream() and getResourcePaths() ServletContext methods to obtain a directory listing for the directory. Effects Algo Risk ApplicationCVE(s): CVE-2015-5174Affected product(s) and affected version(s):Versions 4.9.0 to 4.9.1Refer to the following reference URLs for remediation More info: https://www.ibm.com/blogs/psirt/ibm-security-bulletin-vulnerability-in-opensource-apache-tomcat-affects-ibm-algorithmics-algo-risk-application-cve-2015-5174/ |
|