IBM Tivoli Monitoring Directory Traversal Vulnerability Allowing Arbitrary File Access

A directory traversal vulnerability has been identified in IBM Tivoli Monitoring versions 6.3.0.7 through 6.3.0.7 Service Pack 21. This vulnerability could allow a remote attacker to traverse directories on the system by sending a specially crafted URL request that includes 'dot dot' sequences. Exploitation of this vulnerability could enable the attacker to view arbitrary files on the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the system, allowing for potential data exposure or manipulation.

Remediation

Users are advised to follow the steps provided in the IBM technote 'Remediation of CVE-2025-3355 and CVE-2025-3356' to address this vulnerability.