IBM Tivoli Monitoring Directory Traversal Vulnerability Allowing Unauthenticated File Access

A directory traversal vulnerability has been identified in IBM Tivoli Monitoring versions 6.3.0.7 through 6.3.0.7 Service Pack 21. This vulnerability could allow a remote attacker to traverse directories on the system by sending a specially crafted URL request that includes 'dot dot' sequences. Exploitation of this vulnerability could lead to unauthorized viewing, overwriting, or appending of arbitrary files on the system.

Impact

Exploitation of this vulnerability could result in unauthorized file access, allowing attackers to read, modify, or append data to files on the affected system.

Remediation

Users are advised to follow the steps outlined in the IBM technote 'Remediation of CVE-2025-3355 and CVE-2025-3356' to address this vulnerability.