Skip to content
OpenAdvisories
High · 8.6 CVE-2024-33620 EUVD-2024-34479GHSA-577f-9hhg-fc2w

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the …

Published Jun 18, 2024 · Updated Aug 13, 2024 · Assigned by jpcert

Description

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.

Affected products

VendorProductAffectedFixed
Fsas Technologies FUJITSU Business Application ID Link Manager II V1.8 and earlier —
Fsas Technologies FUJITSU Software ID Link Manager V2.0 —
Fsas Technologies FUJITSU Software TIME CREATOR ID Link Manager V2.3.0, V2.3.1, V2.4, V2.5, V2.6, and V2.7, V3.0, V3.0.2, V3.0.2.1, and V3.0.3 —

References