Skip to content
OpenAdvisories
Medium · 5.3 CVE-2012-3337 EUVD-2012-3315GHSA-vj6v-j788-xf8c

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a sp…

Published Sep 1, 2020 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: InfoSphere Guardium

Description

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to download arbitrary files on the system. IBM X-Force ID: 78284.

Affected products

VendorProductAffectedFixed
IBM InfoSphere Guardium 8.0, 8.01, 8.2 —

References