CVE-2011-4435

https://notcve.org/view.php?id=CVE-2011-4435

The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests. El componente de servidor web en Consolidation and Analysis Engine (CAE) Server en DB2 Query Monitor en IBM DB2 Tools v2.3.0 para z/OS no impide la exploración de directorios, lo que permite a atacantes remotos obtener información sensible a través de peticiones HTTP. • http://secunia.com/advisories/46487 http://www.ibm.com/support/docview.wss?uid=swg1PM41190 http://www.securitytracker.com/id?1026278 • CWE-264: Permissions, Privileges, and Access Controls •