medium6.5
CVE-2024-54169
IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system.
Impact
IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Entirex | Version 11.1 |