CVE-2001-0982: IBM Tivoli Secureway Policy Director

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.

Affected products

• IBM Tivoli Secureway Policy Director: version 3.0.1 only; version 3.6 only; version 3.7 only; version 3.7.1 only

Published 2001-07-23. Last modified 2026-06-16.