CVE-2018-1884 — Path Traversal in IBM Case Manager

CWE-22 — Path Traversal3 documents3 sources
Severity
7.8HIGHNVD
CNA4.8
EPSS
0.9%
top 24.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Case Manager
Timeline
PublishedNov 12
Latest updateMay 13

Description

IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal techniques. IBM X-Force ID: 151970.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5ibm/case_manager6 versions+5
▶NVDibm/case_manager6 versions+5

🔴Vulnerability Details

2
GHSA
GHSA-vh29-437x-8ph3: IBM Case Manager 5↗2022-05-13
▶
CVEList
CVE-2018-1884: IBM Case Manager 5↗2018-11-12
▶
CVE-2018-1884 — Path Traversal in IBM Case Manager | cvebase