EUVD-2023-47465

Malicious code in bioql PyPI...

CVE-2023-43044 IBM License Metric Tool directory traversal

IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 266893...

CVE-2023-43044

The vulnerability CVE-2023-43044 affects IBM License Metric Tool (ILMT) version 9.2. A remote attacker could exploit a directory traversal by sending a URL containing dot-dot sequences (/../) to view arbitrary files on the ILMT server. IBM’s advisory and related sources confirm affected versions ...