CVSS 9.8 · Critical EPSS 0,42%
Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada ibm tivoli monitoring. Skor CVSS 3.1 9.8 (Critical) menurut NVD.
IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view, overwrite, or append to arbitrary files on the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| ibm | tivoli monitoring | Versi 6.3.0.7 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp1 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp10 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp11 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp12 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp13 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp14 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp15 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp16 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp17 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp18 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp19 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp2 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp20 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp21 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp3 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp4 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp5 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp6 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp7 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp8 |
| ibm | tivoli monitoring | Versi 6.3.0.7 sp9 |