CVE-2022-33164

published 2023-09-08

CVE-2022-33164: IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request…

Priority P3 53 critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system. IBM X-Force ID: 228579.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	security_directory_integrator	—	—
ibm	security_directory_server	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22