CVE-2013-6304

Published: Mar 6, 2014Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Multiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass intended access restrictions via a crafted pathname for a (1) configuration or (2) JAR file.

Affected (26)

Products: Ibm: Algo One, Algo Risk Application

Ibm

2 products

Algo One

Algo Risk Application

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Ibm Algo One	Version 4.9.1
Ibm Algo Risk Application	Version 2.4.0.1
Ibm Algo Risk Application	Version 2.4.1
Ibm Algo Risk Application	Version 2.4.2
Ibm Algo Risk Application	Version 2.5.0
Ibm Algo Risk Application	Version 2.5.1
Ibm Algo Risk Application	Version 2.5.2
Ibm Algo Risk Application	Version 2.5.3
Ibm Algo Risk Application	Version 2.5.4
Ibm Algo Risk Application	Version 2.5.5.2
Ibm Algo Risk Application	Version 2.5.5
Ibm Algo Risk Application	Version 2.5.6
Ibm Algo Risk Application	Version 2.5.7.1
Ibm Algo Risk Application	Version 2.5.7.2
Ibm Algo Risk Application	Version 2.5.8
Ibm Algo Risk Application	Version 4.5.1
Ibm Algo Risk Application	Version 4.5.2
Ibm Algo Risk Application	Version 4.5.3
Ibm Algo Risk Application	Version 4.5.4
Ibm Algo Risk Application	Version 4.6.0
Ibm Algo Risk Application	Version 4.6.1
Ibm Algo Risk Application	Version 4.7.0
Ibm Algo Risk Application	Version 4.7.1
Ibm Algo Risk Application	Version 4.8.0
Ibm Algo Risk Application	Version 4.9.0
Ibm Algo Risk Application	Version 4.9.1