CVE-2024-54169

published 2025-02-27

CVE-2024-54169: IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	entirex	—	—

CWE-22