CVE-2024-22328

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Apr 6, 2024
Updated: Jan 14, 2025
CWE ID 22

Summary

CVE-2024-22328 is a vulnerability affecting IBM Maximo Application Suite versions 8.10 and 8.11. This issue allows a remote attacker to traverse directories on the system by sending a specially crafted URL request containing "dot dot" sequences (/../). As a result, attackers could potentially view arbitrary files on the system, posing a significant security risk. IBM's X-Force has assigned this vulnerability the ID 279950.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share