Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-42jm-px5r-4qxq

Опубликовано: 15 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot dot" sequences (/.../) to view arbitrary files on the system.

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot dot" sequences (/.../) to view arbitrary files on the system.

EPSS

Процентиль: 25%
0.00086
Низкий

7.5 High

CVSS3

Дефекты

CWE-22
CWE-32

Связанные уязвимости

CVSS3: 7.5
nvd
около 1 года назад

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot dot" sequences (/.../) to view arbitrary files on the system.

EPSS

Процентиль: 25%
0.00086
Низкий

7.5 High

CVSS3

Дефекты

CWE-22
CWE-32