Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-35016
HistoryJul 31, 2023 - 1:15 a.m.

Design/Logic Flaw

2023-07-3101:15:00
PRIOn knowledge base
www.prio-n.com
3
ibm
security verify governance
identity manager
directory traversal
remote attacker
specially crafted url
arbitrary files
system vulnerability
ibm x-force id 257772
nvd

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing “dot dot” sequences (/…/) to view arbitrary files on the system. IBM X-Force ID: 257772.

CPENameOperatorVersion
security_verify_governanceeq10.0

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

Related for PRION:CVE-2023-35016