IBM Security Bulletin: Apache Tomcat vulnerability in IBM Algo Audit and Compliance (CVE-2015-5174)

Apache Tomcat could allow a remote attacker to traverse directories on the system. Apache Tomcat is used by IBM Algo Audit and Compliance.

CVE(s): CVE-2015-5174

Affected product(s) and affected version(s):

IBM Algo Audit and Compliance versions 2.1.0

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/1UUvhxs
X-Force Database: http://ift.tt/1rhWylT

from IBM Product Security Incident Response Team http://ift.tt/1UUwMeM