Aller au contenu
Se connecter
8.7 Élevée

CVE-2022-33164 IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system

Description

IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system. IBM X-Force ID: 228579.

Produits et versions touchés

Produit Versions touchées Corrigé en
Security Directory Integrator 7.2.0 Pas de correctif indiqué

Autres CVE de Security Directory Integrator

Les 10 CVE de Security Directory Integrator →
CVE-2024-28765 IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote… 5.3 Moyenne CVE-2024-28766 IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could disclose sensitive… 2.4 Faible CVE-2024-28770 IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure… 4.8 Moyenne CVE-2024-28771 IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure… 4.8 Moyenne
Suivre cette CVE