4
CVSSv2

CVE-2019-4384

Published: 19/06/2019 Updated: 30/01/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

IBM Campaign 9.1.2 and 10.1 could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162172.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ibm campaign 9.1.2

ibm campaign 10.1