PT-2024-33676

🗓️ 25 Oct 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Vulnerability in Werkzeug before 3.0.6: UNC paths mis-handled by os.path.isabs on Windows Python below 3.11, may leak data.

Reporter	Title	Published	Views	Family All 416
ibm	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by a Denial of Service vulnerability due to pyasn1	8 Jul 202611:22	–	ibm
ibm	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.0	30 Jun 202616:13	–	ibm
ibm	Security Bulletin: IBM Storage Ceph is vulnerable to Path Traversal and Uncontrolled Resource Consumption in Werkzeug (CVE-2024-49766, CVE-2024-49767)	29 Jul 202520:50	–	ibm
ibm	Security Bulletin: QRadar Advisor With Watson for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	17 Mar 202513:46	–	ibm
ibm	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	28 Jun 202619:38	–	ibm
ibm	Security Bulletin: IBM Maximo Application Suite - Predict Component component uses pyasn1-0.6.2-py3-none-any.whl which is vulnerable to this CVE-2026-30922	1 May 202614:49	–	ibm
ibm	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pyasn1 which is vulnerable to CVE-2026-30922	5 May 202609:43	–	ibm
ibm	Security Bulletin: There is a vulnerability in Python wheel package for the Werkzeug library affecting watsonx Code Assistant On Prem Extensions	27 Mar 202515:45	–	ibm
ibm	Security Bulletin: Vulnerability Werkzeug, Twisted-22.10.0-py3, requests-2.32.2-py3, commons-lang-2.6, commons-fileupload-1.5, urllib3-2.2.2, jetty-server-9.4.56.v20240826 affect IBM Cloud Object Storage Systems (Oct 2025)	24 Oct 202515:45	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-44431
osv	www.osv.dev/vulnerability/CVE-2026-42561
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34519
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49766.json
osv	www.osv.dev/vulnerability/CVE-2026-26007
osv	www.osv.dev/vulnerability/ghsa-87hc-h4r5-73f7
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-42561
osv	www.osv.dev/vulnerability/ghsa-mf9v-mfxr-j63j
osv	www.osv.dev/vulnerability/ghsa-hg6j-4rv6-33pg

07 Jul 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 46.3

CVSS 3.15.3 - 7.5

EPSS0.00803

SSVC