IBM Tivoli Access Manager for e-business WebSEAL contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the WebSEAL server not properly sanitizing user input when certain character encodings are used on AIX, specifically directory traversal style attacks (e.g., ../../) supplied via the URL This directory traversal attack would allow the attacker to read arbitrary files.

Currently, there are no known workarounds or upgrades to correct this issue. However, IBM has released a patch to address this vulnerability.

• Security Tracker: 1024927
• CVE ID: 2010-4622 (see also: NVD) 2011-0494 (see also: NVD)
• Secunia Advisory ID: 42727 42955
• Bugtraq ID: 45582 45836
• ISS X-Force ID: 64306 64737
• VUPEN Advisory: ADV-2010-3329 ADV-2011-0138
• Other Advisory URL: http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87328
  http://www-01.ibm.com/support/docview.wss?uid=swg1IZ87470
  http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91619
  http://www-01.ibm.com/support/docview.wss?uid=swg1IZ91620
• Vendor Specific News/Changelog Entry: http://www-01.ibm.com/support/docview.wss?uid=swg21459999
  http://www-01.ibm.com/support/docview.wss?uid=swg24025790
  http://www-01.ibm.com/support/docview.wss?uid=swg24028829
  http://www-01.ibm.com/support/docview.wss?uid=swg24028860
  http://www-01.ibm.com/support/docview.wss?uid=swg24028861
• Vendor Specific Advisory URL: https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_alert_for_tivoli_access_manager_for_ebusiness9

• Not Available