VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Sep 26, 2016· Updated Jun 17, 2026

CVE-2016-6038

CVE-2016-6038

Description

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure (aka LWI), as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL.

Affected products

5
  • IBM/Aix4 versions
    cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:aix:6.1:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:aix:7.1:*:*:*:*:*:*:*
    • (no CPE)range: 5.3, 6.1, and 7.1
  • IBM/Tivoli Lightweight Infrastructurellm-fuzzy

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.