CVEs-PoC/2016/CVE-2016-5946.md

CVE-2016-5946

Description

Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.

POC

Reference

• http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944
• http://www-01.ibm.com/support/docview.wss?uid=swg1IT16944

Github

No PoCs found on GitHub currently.