IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 239427.
2023-01-26T21:17:48.697
2024-11-21T07:27:17.617
Modified
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | business_automation_workflow | ≤ 21.0.3.1 | Yes |
| Application | ibm | business_automation_workflow | 20.0.0.1 | Yes |
| Application | ibm | business_automation_workflow | 20.0.0.2 | Yes |
| Application | ibm | business_automation_workflow | 22.0.1 | Yes |
| Application | ibm | business_automation_workflow | 22.0.2 | Yes |
| Application | ibm | business_monitor | 8.5.5 | Yes |
| Application | ibm | business_monitor | 8.5.6 | Yes |
| Application | ibm | business_monitor | 8.5.7 | Yes |