IBM Business Automation Workflow 22.0.2 could allow a remote malicious user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 239427.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm business automation workflow 20.0.0.1 |
||
ibm business automation workflow 20.0.0.2 |
||
ibm business automation workflow 22.0.1 |
||
ibm business automation workflow |
||
ibm business automation workflow 22.0.2 |
||
ibm business monitor 8.5.6 |
||
ibm business monitor 8.5.7 |
||
ibm business monitor 8.5.5 |
Vulmon