PT-2025-2720

Name of the Vulnerable Software and Affected Versions: IBM Maximo MXAPIASSET API version 7.6.1.3 Description: The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary file...

CVE-2024-45652: Improper Limitation of a Pathname to a Restricted Directory

IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...