CVE-2016-2933

CWE-22 — Path Traversal3 documents3 sources

Severity

6.8MEDIUM

EPSS

0.6%

top 29.76%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Bigfix Remote Control

Timeline

PublishedNov 30

Latest updateMay 17

Description

Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted request.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:NExploitability: 2.3 | Impact: 4.0

Affected Packages1 packages

▶NVDibm/bigfix_remote_control9.1.2

🔴Vulnerability Details

GHSA

GHSA-r8m3-47wj-g6r4: Directory traversal vulnerability in IBM BigFix Remote Control before 9↗2022-05-17

▶

CVEList

CVE-2016-2933: Directory traversal vulnerability in IBM BigFix Remote Control before 9↗2016-11-30

▶