CVE-2016-5970

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-26 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URL.

Affected products

IBM Security Privileged Identity Manager Virtual Appliance: through 2.0.2

References

http://www-01.ibm.com/support/docview.wss?uid=swg21989205
http://www.securityfocus.com/bid/93080
http://www-01.ibm.com/support/docview.wss?uid=swg21989205
http://www.securityfocus.com/bid/93080

Get alerted when CVE-2016-5970 or the next vulnerability affects your stack