The host is running IBM WebSphere Application Server and is prone to directory traversal vulnerability.

Successful exploitation will allow attackers to read arbitrary files on the affected application and obtain sensitive information that may lead to further attacks. Impact Level: Application

Upgrade IBM WebSphere Application Server to 6.1.0.41 or 7.0.0.19 or 8.0.0.1 For updates refer to http://www-01.ibm.com/support/docview.wss?uid=swg24028875

The flaw is due to error in administration console which fails to handle certain requests. This allows remote attackers to read arbitrary files via a '../' (dot dot) in the URI.

IBM WebSphere Application Server versions 6.1 before 6.1.0.41, 7.0 before 7.0.0.19 and 8.0 before 8.0.0.1

• http://osvdb.org/74817
• http://secunia.com/advisories/45749
• http://www-01.ibm.com/support/docview.wss?uid=swg21509257
• http://xforce.iss.net/xforce/xfdb/69473

---

Updated on 2015-03-25