CVE-2022-33164

published 2023-09-08

CVE-2022-33164: IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request…

critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system. IBM X-Force ID: 228579.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	security_directory_integrator	—	—
ibm	security_directory_server	—	—

CWE-22