6.8
Moyenne
CVE-2022-33165 IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system
Description
IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 228582.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Directory Server | 6.4.0 | Pas de correctif indiqué |
Autres CVE de Security Directory Server
Les 16 CVE de Security Directory Server →
CVE-2022-32755
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML…
5.5
Moyenne
CVE-2022-33161
IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure…
5.3
Moyenne
CVE-2019-4563
IBM Security Directory Server 6.4.0 does not set the secure attribute on authorization tokens or session cookies
3.7
Faible
CVE-2019-4547
IBM Security Directory Server 6.4.0 generates an error message that includes sensitive information about its…
5.3
Moyenne