Lucene search
IbmCVELIST:CVE-2024-39741HistoryJul 15, 2024 - 2:09 a.m.
CVE-2024-39741 IBM Datacap Navigator directory traversal
2024-07-1502:09:40
CWE-22
ibm
www.cve.org
5
ibm datacap navigator
remote attacker
directory traversal
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
16.7%
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing “dot dot” sequences (/…/) to view arbitrary files on the system. IBM X-Force ID: 296010.
CNA Affected
[
{
"cpes": [
"cpe:2.3:a:ibm:datacap:9.1.5:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:datacap:9.1.6:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:datacap:9.1.7:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:datacap:9.1.8:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:datacap:9.1.9:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "Datacap Navigator",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9"
}
]
}
]Related
nvd
nvd
CVE-2024-39741
2024-07-15 03:15:02
cve
cve
CVE-2024-39741
2024-07-15 03:15:02
vulnrichment
vulnrichment
CVE-2024-39741 IBM Datacap Navigator directory traversal
2024-07-15 02:09:40
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM Datacap
2024-09-05 22:09:47
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.001
Percentile
16.7%
Related for CVELIST:CVE-2024-39741