VULNERABILITY INTELLIGENCE
CVE-2013-6720
CVSS score5.5 MEDIUM
EPSS probability29.07%
CISA KEVNot currently listed
Published2014-03-06
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:N
Description
Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2 allows remote authenticated users to bypass intended access restrictions via a .. (dot dot) in the log parameter, as demonstrated using a crafted request for a customer-support file, as demonstrated by a log file.
Weakness classification
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')