CVE-2011-4435

https://notcve.org/view.php?id=CVE-2011-4435

11 Nov 2011 — The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests. El componente de servidor web en Consolidation and Analysis Engine (CAE) Server en DB2 Query Monitor en IBM DB2 Tools v2.3.0 para z/OS no impide la exploración de directorios, lo que permite a atacantes remotos obtener información sensible a través de peticiones... • http://secunia.com/advisories/46487 • CWE-264: Permissions, Privileges, and Access Controls •