CVE-2015-0171

IBM Security SiteProtector 3.0-3.0.0.6, 3.1-3.1.0.3, 3.1.1-3.1.1.1 Path Traversal & Arbitrary File Write

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21699470

Scores

EPSS 0.0136
EPSS Percentile 68.4%

Details

CWE
CWE-22
Status published
Products (13)
ibm/security_siteprotector_system 3.0
ibm/security_siteprotector_system 3.0.0.1
ibm/security_siteprotector_system 3.0.0.2
ibm/security_siteprotector_system 3.0.0.3
ibm/security_siteprotector_system 3.0.0.4
ibm/security_siteprotector_system 3.0.0.5
ibm/security_siteprotector_system 3.0.0.6
ibm/security_siteprotector_system 3.1.0.0
ibm/security_siteprotector_system 3.1.0.1
ibm/security_siteprotector_system 3.1.0.2
... and 3 more
Published May 25, 2015
Tracked Since Feb 18, 2026