Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xjh-r99f-3c32

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files they are authorized to but not while using this interface. The remote authenticated user can bypass the interface checks by modifying a parameter thereby gaining access to their files through this interface. IBM X-Force ID: 239303.

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files they are authorized to but not while using this interface. The remote authenticated user can bypass the interface checks by modifying a parameter thereby gaining access to their files through this interface. IBM X-Force ID: 239303.

EPSS

Процентиль: 44%
0.00214
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 4.3
nvd
около 3 лет назад

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files they are authorized to but not while using this interface. The remote authenticated user can bypass the interface checks by modifying a parameter thereby gaining access to their files through this interface. IBM X-Force ID: 239303.

EPSS

Процентиль: 44%
0.00214
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-22