Skip to content
Sign in
5.3 Medium

CVE-2023-43044 IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system

Description

IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 266893.

Affected products and versions

Product Affected versions Fixed in
License Metric Tool 9.2 No fix stated

Other CVEs of License Metric Tool

The 3 CVEs of License Metric Tool →
CVE-2025-36351 IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST… 4.3 Medium CVE-2025-36352 IBM License Metric Tool 9.2.0 through 9.2.40 is vulnerable to stored cross-site scripting 6.4 Medium
Track this CVE