CVE-2016-6038

MEDIUM

IBM Tivoli LWI - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure (aka LWI), as used in AIX 5.3, 6.1, and 7.1, allows remote authenticated users to read arbitrary files via a crafted URL.

References (3)

Scores

CVSS v3 6.5
EPSS 0.0022
EPSS Percentile 44.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-22
Status published

Affected Products (4)

ibm/aix
ibm/aix
ibm/aix
n/a/n/a

Timeline

Published Sep 26, 2016
Tracked Since Feb 18, 2026