← CVE Intelligence

CVE-2024-41784

IBM Sterling Secure Proxy directory traversal PUBLISHED

Description (CNA)

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot dot" sequences (/.../) to view arbitrary files on the system.

Affected (CNA)

Vendor / productVersions
IBM / Sterling Secure Proxyaffected 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0

CWE

CWE-32

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.