Security Advisory

CVE-2019-4384

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-06-19 13:30:19
Last updated 2024-09-17 01:31:41
Assigner ibm
CVSS score 4.3
State PUBLISHED

Description

IBM Campaign 9.1.2 and 10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162172.