6.5
Moyenne
CVE-2024-54169 IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system
Description
IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EntireX | 11.1 | Pas de correctif indiqué |
Autres CVE de EntireX
Les 13 CVE de EntireX →
CVE-2024-54170
IBM EntireX 11.1 could allow a local user to cause a denial of service due to use of a regular expression with an…
5.5
Moyenne
CVE-2025-0759
IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due to improper shared…
3.3
Faible
CVE-2024-56810
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is…
3.3
Faible
CVE-2024-56496
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is…
3.3
Faible