Directory Traversal & File Retrieval Risks

**Executive Summary:** This 2006 advisory from Virtual Security Research describes a directory traversal vulnerability in IBM Tivoli Access Manager's Web Server Plug-in (pkmslogout) that allows an authenticated attacker to read arbitrary files outside the web root (example: /etc/passwd). The report includes technical details, an exploitation example, vendor notification timeline, and links to IBM fix packs; administrators are advised to apply the provided fixes.