Sxkeebler

**Name of the Vulnerable Software and Affected Versions** IBM WebSphere Application Server versions 6.1 before 6.1.0.41 IBM WebSphere Application Server versions 7.0 before 7.0.0.19 IBM WebSphere Application Server versions 8.0 before 8.0.0.1 **Description** A directory traversal issue exists in the administration console, allowing remote attackers to read arbitrary files by including a .. (dot dot) in the URI. **Recommendations** For IBM WebSphere Application Server version 6.1 before 6.1.0.41, update to version 6.1.0.41 or later. For IBM WebSphere Application Server version 7.0 before 7.0.0.19, update to version 7.0.0.19 or later. For IBM WebSphere Application Server version 8.0 before 8.0.0.1, update to version 8.0.0.1 or later.

**Name of the Vulnerable Software and Affected Versions** NetSupport Manager Client versions prior to 10.20.0004 **Description** The issue allows remote attackers to bypass the basic and authentication schemes by spoofing the NetSupport Manager. **Recommendations** For versions prior to 10.20.0004, update to version 10.20.0004 or later to resolve the issue.