CVE-2016-6038 IBM AIX pconsole Directory Traversal Vulnerability (pconsole_advisory.asc)

A directory traversal vulnerability in the Eclipse Help component shipped by the Tivoli Lightweight Infrastructure (LWI) allows remote attackers to read arbitrary files via a crafted URL. This vulnerability affects IBM System Director Console for AIX (pConsole) and Web Based System Management Remote Client (WebSM Remote).

Successful exploitation allows remote attackers to read arbitrary files via a crafted URL.

The vendor has released fixes to resolve this vulnerability. Refer to pconsole_advisory.asc to obtain more information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

pconsole_advisory.asc: AIX 5.3, 6.1 and 7.1