IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files they are authorized to but not while using this interface. The remote authenticated user can bypass the interface checks by modifying a parameter thereby gaining access to their files through this interface. IBM X-Force ID: 239303.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/239303 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/6850801 | Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/239303 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/6850801 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/239303 - VDB Entry, Vendor Advisory | |
| References | () https://www.ibm.com/support/pages/node/6850801 - Patch, Vendor Advisory |
07 Nov 2023, 03:54
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files they are authorized to but not while using this interface. The remote authenticated user can bypass the interface checks by modifying a parameter thereby gaining access to their files through this interface. IBM X-Force ID: 239303. |
Information
Published : 2022-12-22 21:15
Updated : 2024-11-21 07:27
NVD link : CVE-2022-43858
Mitre link : CVE-2022-43858
CVE.ORG link : CVE-2022-43858
JSON object : View
Products Affected
ibm
- i
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')