Skip to content
Sign in
6.5 Medium

CVE-2024-54169 IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system

Description

IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Affected products and versions

Product Affected versions Fixed in
EntireX 11.1 No fix stated

Other CVEs of EntireX

The 13 CVEs of EntireX →
CVE-2024-54170 IBM EntireX 11.1 could allow a local user to cause a denial of service due to use of a regular expression with an… 5.5 Medium CVE-2025-0759 IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due to improper shared… 3.3 Low CVE-2024-56810 IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is… 3.3 Low CVE-2024-56496 IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is… 3.3 Low
Track this CVE