Code injection

2023-12-2002:15:00

PRIOn knowledge base

www.prio-n.com

ibm security guardium

key lifecycle manager

remote attacker

directory traversal

specially crafted url

modify files

ibm x-force id

nvd

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

35.2%

JSON

IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing “dot dot” sequences (/…/) to view modify files on the system. IBM X-Force ID: 271196.