CVE-2016-5946

Published: Sep 26, 2016Modified: May 6, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Directory traversal vulnerability in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.

Affected (16)

Products: Ibm: Spectrum Control, Tivoli Storage Productivity Center

Ibm

2 products

Spectrum Control

Tivoli Storage Productivity Center

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Spectrum Control	Version 5.2.10.1
Ibm Spectrum Control	Version 5.2.10
Ibm Spectrum Control	Version 5.2.8
Ibm Spectrum Control	Version 5.2.9

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Storage Productivity Center	Version 5.2.0
Ibm Tivoli Storage Productivity Center	Version 5.2.1.1
Ibm Tivoli Storage Productivity Center	Version 5.2.1
Ibm Tivoli Storage Productivity Center	Version 5.2.2
Ibm Tivoli Storage Productivity Center	Version 5.2.3
Ibm Tivoli Storage Productivity Center	Version 5.2.4.1
Ibm Tivoli Storage Productivity Center	Version 5.2.4
Ibm Tivoli Storage Productivity Center	Version 5.2.5.1
Ibm Tivoli Storage Productivity Center	Version 5.2.5
Ibm Tivoli Storage Productivity Center	Version 5.2.6
Ibm Tivoli Storage Productivity Center	Version 5.2.7.1
Ibm Tivoli Storage Productivity Center	Version 5.2.7