Directory traversal

2014-03-0611:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.8%

JSON

Multiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass intended access restrictions via a crafted pathname for a (1) configuration or (2) JAR file.

CPENameOperatorVersion
algo_oneeq4.9.1
algo_risk_applicationeq4.5.1
algo_risk_applicationeq2.5.2
algo_risk_applicationeq2.5.3
algo_risk_applicationeq4.9.0
algo_risk_applicationeq2.5.7.2
algo_risk_applicationeq4.5.4
algo_risk_applicationeq4.5.3
algo_risk_applicationeq2.5.8
algo_risk_applicationeq4.7.0

Name	Operator	Version
algo_one	eq	4.9.1
algo_risk_application	eq	4.5.1
algo_risk_application	eq	2.5.2
algo_risk_application	eq	2.5.3
algo_risk_application	eq	4.9.0
algo_risk_application	eq	2.5.7.2
algo_risk_application	eq	4.5.4
algo_risk_application	eq	4.5.3
algo_risk_application	eq	2.5.8
algo_risk_application	eq	4.7.0