IBM Algo One Algo Risk Application CVE-2013-6304 Directory Traversal Vulnerability

Bugtraq ID:	65929
Class:	Input Validation Error
CVE:	CVE-2013-6304
Remote:	Yes
Local:	No
Published:	Feb 28 2014 12:00AM
Updated:	Feb 28 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	IBM Algo One Algo Risk Application 2.5.7 2 IBM Algo One Algo Risk Application 2.5.7 1 IBM Algo One Algo Risk Application 2.5.6 IBM Algo One Algo Risk Application 2.5.5 2 IBM Algo One Algo Risk Application 2.5.5 IBM Algo One Algo Risk Application 2.5.4 IBM Algo One Algo Risk Application 2.5.3 IBM Algo One Algo Risk Application 2.5.2 IBM Algo One Algo Risk Application 2.5.1 IBM Algo One Algo Risk Application 2.5 IBM Algo One Algo Risk Application 2.4.2 IBM Algo One Algo Risk Application 2.4.1 IBM Algo One Algo Risk Application 2.4 1 IBM Algo One 4.9 IBM Algo One 4.8 IBM Algo One 4.7.1 IBM Algo One 4.7 IBM Algo One 4.9.1 IBM Algo One 2.4.0.1
Not Vulnerable:	IBM Algo One 5.0

IBM Algo One Algo Risk Application CVE-2013-6304 Directory Traversal Vulnerability

Attackers can exploit this issue with a web browser or readily available tools.

IBM Algo One Algo Risk Application CVE-2013-6304 Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Algo One Algo Risk Application CVE-2013-6304 Directory Traversal Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: IBM Algo One affected by vulnerability in path traversal in I (IBM)