CVE-2022-43864
IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 239427.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - psirt@us.ibm.com
- Published
- 2023-01-26
- Last modified
- 2025-03-31
- Weaknesses
- CWE-22
Affected products
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/239427
- https://www.ibm.com/support/pages/node/6857223
- https://www.ibm.com/support/pages/node/6857239
