8.6
High
CVE-2024-33620 Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR
Description
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FUJITSU Business Application ID Link Manager II | Versions not published | |
| FUJITSU Software ID Link Manager | 2.0 | No fix stated |
| FUJITSU Software TIME CREATOR ID Link Manager 3.0 | 3.0 → 3.0.2.1 | No fix stated |
| business_application_id_link_manager_ii 1.8 | earliest → 1.8 | No fix stated |
| id_link_manager | 2.0 | No fix stated |
| time_creator_id_link_manager | 3.0.3 | No fix stated |