Design/Logic Flaw

2019-04-0214:29:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.6%

JSON

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing “dot dot” sequences (/…/) to view arbitrary files on the system. IBM X-Force ID: 144343.

CPENameOperatorVersion
security_privileged_identity_managereq2.1.1

CPE	Name	Operator	Version
	security_privileged_identity_manager	eq	2.1.1

References

www.ibm.com/support/docview.wss?uid=ibm10879093

exchange.xforce.ibmcloud.com/vulnerabilities/144343