4.3
Moyenne
CVE-2020-5001 IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the…
Description
IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 192953.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Financial Transaction Manager 3.2 | 3.2.0 → < 3.2.7 | 3.2.7 |
Autres CVE de Financial Transaction Manager
Les 34 CVE de Financial Transaction Manager →
CVE-2020-4556
IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be…
4.0
Moyenne
CVE-2020-5026
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote…
4.3
Moyenne
CVE-2020-5002
IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions…
4.3
Moyenne
CVE-2022-43872
IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows…
5.3
Moyenne