IBM Power Hardware Management Console Directory Traversal Vulnerability

A directory traversal vulnerability has been identified in IBM Power Hardware Management Console (HMC) version 10.3.1050.0. This vulnerability could allow an authenticated user to traverse directories on the system. By sending a specially crafted URL request that includes 'dot dot' sequences, an attacker could potentially access arbitrary files on the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the system.

Remediation

Users can upgrade to IBM Power HMC version 10.3.1060.0 SP1 x86 or 10.3.1060.0 SP1 ppc. These versions include the necessary fix for this vulnerability.