CVE-2024-41765
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 4, 2025
CWE ID 22
Summary
CVE-2024-41765 is a vulnerability affecting IBM Engineering Lifecycle Optimization - Publishing versions 7.0.2 and 7.0.3. This issue allows a remote attacker to traverse directories on the system by sending a specially crafted URL request containing "dot dot" sequences (/../). By exploiting this vulnerability, an attacker could potentially gain unauthorized access to sensitive files, leading to potential data breaches or system compromise. It is recommended that users apply the available patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- IBM Corporation