Skip to content
OpenAdvisories
Medium · 5.9 CVE-2021-20354 EUVD-2021-7772GHSA-qq58-vj5v-jxhv

IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a speciall…

Published Feb 18, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server

Description

IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 194883.

Affected products

VendorProductAffectedFixed
IBM WebSphere Application Server 8.0, 8.5, 9.0 —

References