Design/Logic Flaw

2024-03-0103:15:00

PRIOn knowledge base

www.prio-n.com

ibm

filenet content manager

component 5.5.8.0

5.5.10.0

5.5.11.0

directory traversal

vulnerability

remote attacker

url request

arbitrary files

system

x-force id 261115

nvd

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.5%

JSON

IBM Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing “dot dot” sequences (/…/) to view arbitrary files on the system. IBM X-Force ID: 261115.