Description (CNA)
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fsas Technologies Inc. / FUJITSU Business Application ID Link Manager II | affected V1.8 and earlier |
| Fsas Technologies Inc. / FUJITSU Software ID Link Manager | affected V2.0 |
| Fsas Technologies Inc. / FUJITSU Software TIME CREATOR ID Link Manager | affected V2.3.0; affected V2.3.1; affected V2.4; affected V2.5; affected V2.6; affected and V2.7 |
| Fsas Technologies Inc. / FUJITSU Software TIME CREATOR ID Link Manager | affected V3.0; affected V3.0.2; affected V3.0.2.1; affected and V3.0.3 |
CWE
No CWE identifiers supplied.
References
- https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html
- https://jvn.jp/en/jp/JVN65171386/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.