CVE-2013-6720: Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in I...

Security readout for executives and security teams

This flaw affects the IBM Tealeaf CX Passive Capture Application web console. An authenticated remote user could use a directory traversal weakness to access files outside the intended download area, such as support or log files. The sources do not provide CVSS scoring or evidence of active exploitation. Exposure is limited to environments running affected IBM Tealeaf CX PCA web consoles, especially where authenticated users beyond administrators can reach the console. Internet exposure would raise concern, but the bundle does not state typical deployment exposure. Treat as a targeted remediation item for legacy IBM Tealeaf environments. Prioritize quickly if the PCA web console is exposed to many users or external networks. If Tealeaf is retired, confirm removal rather than assuming no exposure. Mitigation focus: Identify all IBM Tealeaf CX PCA web console deployments and versions.; Apply IBM fixed packs or supported vendor fixes for affected releases.; For 7.x through 8.6, confirm IBM-supported upgrade or remediation guidance..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.