CVE-2024-41784

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot dot" sequences (/.../) to view arbitrary files on the system.

Score
CVSS 3.1 7.5 High
Status
Analyzed - psirt@us.ibm.com
Published
2024-11-15
Last modified
2024-11-15
Weaknesses
CWE-22, CWE-32

Affected products

References

 
 
© AVABIS GmbH privacypolicy about