PT-2025-8949 · Ibm · Ibm Entirex
CVE-2024-54169
·
Published
2025-02-27
·
Updated
2025-02-27
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM EntireX version 11.1
Description
The issue allows an authenticated attacker to traverse directories on the system by sending a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Recommendations
For IBM EntireX version 11.1, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the ability to send specially crafted URL requests to prevent directory traversal.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Entirex