CVE-2024-33620

2024-06-1806:15:11

[email protected]

web.nvd.nist.gov

path traversal

id link manager

fujitsu software time creator

server vulnerability

unauthenticated attacker

sensitive information

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.

Affected configurations

Vulners

Node

fsas_technologies_inc.fujitsu_business_application_id_link_manager_iiMatch1.8

fsas_technologies_inc.fujitsu_software_id_link_managerMatch2.0

fsas_technologies_inc.fujitsu_software_time_creator_id_link_managerMatch2.3.0

fsas_technologies_inc.fujitsu_software_time_creator_id_link_managerMatch2.3.1

fsas_technologies_inc.fujitsu_software_time_creator_id_link_managerMatch2.4

fsas_technologies_inc.fujitsu_software_time_creator_id_link_managerMatch2.5

fsas_technologies_inc.fujitsu_software_time_creator_id_link_managerMatch2.6

fsas_technologies_inc.fujitsu_software_time_creator_id_link_managerMatch2.7

fsas_technologies_inc.fujitsu_software_time_creator_id_link_managerMatch3.0

fsas_technologies_inc.fujitsu_software_time_creator_id_link_managerMatch3.0.2

fsas_technologies_inc.fujitsu_software_time_creator_id_link_managerMatch3.0.2.1

fsas_technologies_inc.fujitsu_software_time_creator_id_link_managerMatch3.0.3

CNA Affected

[
  {
    "vendor": "Fsas Technologies Inc.",
    "product": "FUJITSU Business Application ID Link Manager II",
    "versions": [
      {
        "version": "V1.8 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fsas Technologies Inc.",
    "product": "FUJITSU Software ID Link Manager",
    "versions": [
      {
        "version": "V2.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fsas Technologies Inc.",
    "product": "FUJITSU Software TIME CREATOR ID Link Manager",
    "versions": [
      {
        "version": "V2.3.0",
        "status": "affected"
      },
      {
        "version": " V2.3.1",
        "status": "affected"
      },
      {
        "version": " V2.4",
        "status": "affected"
      },
      {
        "version": " V2.5",
        "status": "affected"
      },
      {
        "version": " V2.6",
        "status": "affected"
      },
      {
        "version": " and V2.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Fsas Technologies Inc.",
    "product": "FUJITSU Software TIME CREATOR ID Link Manager",
    "versions": [
      {
        "version": "V3.0",
        "status": "affected"
      },
      {
        "version": " V3.0.2",
        "status": "affected"
      },
      {
        "version": " V3.0.2.1",
        "status": "affected"
      },
      {
        "version": " and V3.0.3",
        "status": "affected"
      }
    ]
  }
]